Search Images Maps Play YouTube News Gmail Drive More »
Sign in
Screen reader users: click this link for accessible mode. Accessible mode has the same essential features but works better with your reader.

Patents

  1. Advanced Patent Search
Publication numberUS20040249938 A1
Publication typeApplication
Application numberUS 10/870,469
Publication dateDec 9, 2004
Filing dateJun 17, 2004
Priority dateJun 28, 2000
Also published asUS6795856, WO2002001381A1
Publication number10870469, 870469, US 2004/0249938 A1, US 2004/249938 A1, US 20040249938 A1, US 20040249938A1, US 2004249938 A1, US 2004249938A1, US-A1-20040249938, US-A1-2004249938, US2004/0249938A1, US2004/249938A1, US20040249938 A1, US20040249938A1, US2004249938 A1, US2004249938A1
InventorsClinton Bunch
Original AssigneeBunch Clinton D.
Export CitationBiBTeX, EndNote, RefMan
External Links: USPTO, USPTO Assignment, Espacenet
System and method for monitoring access to a network by a computer
US 20040249938 A1
Abstract
Employee Internet usage is monitored to identify the web sites employees visit and the amount of time employees spend at each site. The system utilizes a client-based module which monitors Internet access, which operates in conjunction with an enforcement supervisor located on a remote web server. A client-based monitoring module performs all of the monitoring and logging activity. The previous web page title, location (URL) and time spent are stored by the client component in memory on the client computer. The web page title and URL are obtained from system notifications from the browser to the client component. The client computer uploads the log containing the web page information to a web-based supervising module.
Images(5)
Previous page
Next page
Claims(58)
What is claimed is:
1. A method for monitoring access to the Internet by a computer, the method comprising:
providing at the computer a client-based monitoring module;
providing at a web server a web-based supervisor module that specifies guidelines which govern the access to the Internet by the computer;
sending the guidelines from the supervisor module to the client-based monitoring module;
at the client-based monitoring module, logging a request for Internet access in a log and logging any violation of the guidelines in the log; and
sending the log to the supervisor module where the following sub-steps are performed:
(1) copying the log into a web-based log; and
(2) notifying a designated administrator of any violation.
2. The method as recited in claim 1, further comprising selecting the computer from the group consisting of personal computers, wireless telephones, cellular telephones, televisions, computer game devices, and computerized appliances.
3. The method as recited in claim 1, wherein the operation of providing at the web server the web-based supervisor module further comprises specifying guidelines relative to interactive usage of the Internet by a user of the computer.
4. The method as recited in claim 1, wherein the operation of providing at the web server the web-based supervisor module further comprises specifying guidelines relative to the times at which a user of the computer can interactively use the Internet.
5. The method as recited in claim 1, further comprising activating a browser and triggering the client-based monitoring module.
6. The method as recited in claim 1, wherein the operation of logging a request for Internet access in a log further comprises intercepting a universal resource link request between a browser and a network programming interface.
7. A system for monitoring access to a network, the system comprising:
a computer operable to connect to the network;
a monitoring module associated with the computer, the monitoring module being operable to create a database containing a history log relative to the access of the network; and
a supervisor module provided at a server which is in periodic communication with the computer, the supervisor module including a web-based log operable to store the history log,
wherein the monitoring module is operable to transfer the history log from the computer to the supervisor module.
8. The system as recited in claim 7, wherein the network is the Internet.
9. The system as recited in claim 7, wherein the computer comprises a device selected from the group consisting of personal computers, wireless telephones, cellular telephones, televisions, computer game devices, and computerized appliances.
10. The system as recited in claim 7, wherein the monitoring module is operable to monitor interactive usage of the network by a user of the computer.
11. The system as recited in claim 7, wherein the monitoring module is operable to monitor the times at which a user of the computer can be connected to the network.
12. The system as recited in claim 7, wherein the monitoring module is operable to monitor destinations on the network.
13. The system as recited in claim 7, wherein the monitoring module is operable to search the computer for a file name.
14. The system as recited in claim 7, wherein the monitoring module provides an indication of the amount of authorized time selected from the group consisting of an amount of time a user of the computer has remaining on the network and an amount of time a user of the computer has consumed on the network.
15. The system as recited in claim 7, wherein the monitoring module is triggered by activation of an Internet browser.
16. The system as recited in claim 15, wherein the monitoring module considers the time the Internet browser is minimized to be inactive time.
17. The system as recited in claim 7, wherein the monitoring module provides an indication of a period of network use.
18. The system as recited in claim 7, wherein the monitoring module provides an indication of a period of network use selected from the group consisting of monitored, restricted, and unrestricted.
19. The system as recited in claim 7, further comprising a plurality of computers operable to connect to the network, each of the plurality of computers including respective monitoring modules.
20. A method for monitoring access to a network by a computer, the method comprising:
specifying guidelines which govern the access to the network by the computer;
storing the guidelines at the computer;
monitoring a request for access to the network at the computer;
responsive to a violation of the specified guidelines caused by the request for access, logging the violation in a log stored at the computer;
providing an indication of the violation to a user of the computer; and
permitting the request for access.
21. The method as recited in claim 20, wherein the operation of specifying guidelines which govern the access further comprises specifying guidelines which govern Internet access.
22. The method as recited in claim 20, further comprising selecting the computer from the group consisting of personal computers, wireless telephones, cellular telephones, televisions, computer game devices, and computerized appliances.
23. The method as recited in claim 20, further comprising sending the log to a supervisor module associated with a web server where the following sub-steps are performed:
(1) copying the log into a web-based log; and
(2) notifying a designated administrator of the violation.
24. The method as recited in claim 20, wherein the operation of specifying guidelines further comprises specifying guidelines relative to interactive usage of the network by the user of the computer.
25. The method as recited in claim 20, wherein the operation of specifying guidelines further comprises specifying guidelines relative to the times at which the user of the computer can interactively use the network.
26. The method as recited in claim 20, wherein the operation of monitoring the request for access further comprises the operation of detecting activation of an application operable to interface with the network.
27. The method as recited in claim 20, wherein the operation of monitoring the request for access further comprises intercepting a universal resource link request between an application operable to interface with the network and a network programming interface.
28. A system for monitoring access to the Internet by a computer, the system comprising:
means for specifying guidelines which govern access to the Internet by the computer;
means for storing the guidelines at the computer;
at the computer, means for logging a request for access to the Internet in a log and logging any violation of the guidelines in the log; and
means for sending the log to a supervisor module associated with a server wherein the log is copied to a web-based log.
29. The system as recited in claim 28, further comprising means, responsive to any violation of the guidelines, for notifying a designated administrator of any violation.
30. The system as recited in claim 28, further comprising means for indicating an amount of authorized time a user of the computer has remaining on the Internet.
31. The system as recited in claim 30, wherein the means for indicating further comprises means for displaying a time selected from the group consisting of number of permitted minutes/week, number of minutes already consumed/week, monitored and restricted start and end times, and current system time at the computer.
32. The system as recited in claim 28, wherein the means for specifying guidelines further comprises means for specifying guidelines relative to a total time a user of the computer can be connected to the Internet.
33. The system as recited in claim 28, wherein the means for specifying guidelines further comprises means for specifying guidelines relative to times at which a user of the computer can interactively use the Internet.
34. The system as recited in claim 28, wherein the means for logging the request for access further comprises means for detecting activation of an application operable to interface with the Internet.
35. The system as recited in claim 28, wherein the means for logging a request for access to the Internet further comprises means for intercepting a universal resource link request between an application operable to interface with the Internet and a network programming interface.
36. A method for monitoring access to a network by a computer, the method comprising:
specifying guidelines which govern-the access to the network by the computer;
storing the guidelines at the computer; and
based upon the guidelines, monitoring an amount of authorized time a user of the computer has relative to the network.
37. The method as recited in claim 36, further comprising at the computer, logging a request for access to the network in a log and logging any violation of the guidelines in the log.
38. The method as recited in claim 36, wherein the operation of monitoring an amount of authorized time further comprises providing to the user an indication of the amount of authorized time.
39. The method as recited in claim 36, wherein the operation of monitoring an amount of authorized time further comprises displaying to the user the amount of authorized time the user of the computer has remaining on the network.
40. The method as recited in claim 36, wherein the operation of monitoring the amount of authorized time further comprises monitoring an amount of remaining time the user of the computer has on the network.
41. The system as recited in claim 36, wherein the operation of monitoring the amount of authorized time further comprises monitoring an amount of time the user of the computer has consumed on the network.
42. The method as recited in claim 36, wherein the operation of specifying guidelines which govern the access to the network by the computer further comprises specifying guidelines which govern Internet access.
43. The method as recited in claim 36, further comprising selecting the computer from the group consisting of personal computers, wireless telephones, cellular telephones, televisions, computer game devices, and computerized appliances.
44. The method as recited in claim 36, wherein the operation of monitoring the amount of authorized time the user of the computer has relative to the network further comprises displaying to the user a time selected from the group consisting of number of permitted minutes/week, number of minutes already consumed/week, monitored and restricted start and end times, and current system time at the computer.
45. The method as recited in claim 36, wherein the operation of monitoring the amount of authorized time the user of the computer has relative to the network further comprises indicating to the user a period of use selected from the group consisting of monitored, restricted, and unrestricted.
46. A system for monitoring access to a network, the system comprising:
a computer operable to connect to the network; and
a timer associated with the computer, the timer being operable to maintain an amount of authorized time a user of the computer has relative to the network.
47. The system as recited in claim 46, further comprising a monitoring module in communication with the timer, the monitoring module being operable to notify the user of the amount of authorized time the user of the computer has relative to the network.
48. The system as recited in claim 47, wherein the monitoring module provides a visual display to the user of the amount of authorized time the user of the computer has relative to the network.
49. The system as recited in claim 46, further comprising a monitoring module in communication with the timer, the monitoring module being operable to notify a server of the amount of authorized time the user of the computer has relative to the network.
50. The system as recited in claim 46, wherein the timer is operable to determine whether the user of the computer is inactive relative to the network such that, if the user is inactive, the inactivity of the user is ignored in regards to the amount of authorized time.
51. The system as recited in claim 50, wherein the timer monitors an application operable to interface with the network to determine whether the user of the computer is inactive.
52. The system as recited in claim 50, wherein the timer monitors a browser to determine whether the user of the computer is inactive.
53. The system as recited in claim 46, wherein the computer is operable to connect to the Internet.
54. The system as recited in claim 46, wherein the computer comprises a device selected from the group consisting of personal computers, wireless telephones, cellular telephones, computer game devices, and computerized appliances.
55. The system as recited in claim 46, wherein the amount of authorized time comprises an amount of remaining time the user of the computer has on the network.
56. The system as recited in claim 46, wherein the amount of authorized time comprises an amount of time the user of the computer has consumed on the network.
57. The system as recited in claim 46, wherein the timer monitors a period of network use.
58. The system as recited in claim 46, wherein the timer monitors a period of network use selected from the group consisting of monitored, restricted, and unrestricted.
Description
    CROSS-REFERENCE TO RELATED APPLICATION
  • [0001]
    This is a continuation application of co-pending U.S. patent application Ser. No. 09/605,124, entitled “System and Method for Monitoring the Internet Access of a Computer,” filed on Jun. 28, 2000, in the name of Clinton D. Bunch, which is hereby incorporated by reference for all purposes.
  • TECHNICAL FIELD OF THE INVENTION
  • [0002]
    The present invention relates generally to information processing, and in particular to systems and methods for monitoring access and usage of individual computer systems and local area networks (“LANS”) connected to larger open networks (wide area networks or “WANS”), including the Internet.
  • BACKGROUND OF THE INVENTION
  • [0003]
    The explosive growth of the Internet (“Net”), particularly the World Wide Web (“Web”), has had a dramatic effect on the way many corporations and other organizations do business. The Internet brings a world of information to the fingertips of employees. However, some of what the Web introduces into the workplace can be non-productive and damaging to a business. Employees who waste company time or resources on non-work-related activities can become a drain on the company. If Internet bandwidth is used for downloading pornography or making personal travel reservations, it could mean slower access for employees doing work. Fellow employees could be exposed to inappropriate material that could ultimately lead to a sexual harassment lawsuit. Just as it is inappropriate to pass around certain materials at work, it is inappropriate for employees to be viewing certain material on company computers, especially if other employees may be unwittingly exposed to that material.
  • [0004]
    As a result, corporate IS (Information System) departments face new challenges. Companies are increasingly looking for the best way to manage Internet access, and keep objectionable online material out of the workplace. One hundred twenty-two million employees are expected to access the Internet, and 660,000 companies are expected to implement Internet productivity systems in the year 2000.
  • [0005]
    One extreme solution is to build a company-wide intranet. However, the company's knowledge-base may not include the information an employee needs. Also, as the use of E-mail becomes more accepted and the Internet continues to grow, cutting employees off from the Web does not make good business sense.
  • [0006]
    The software industry has introduced a number of products and technologies that are designed primarily to monitor and track the web sites visited by users. Most, if not all of these products are based on filtering software.
  • [0007]
    Filtering software is designed to help companies control recreational and personal Internet use. The software monitors employee use of the Net and, depending on how it is configured by the employer, prevents employees from visiting certain types of Web sites that could interfere with productivity, tie up Internet bandwidth or violate company policies.
  • [0008]
    Some filtering software contains what the company calls its list of sites that are inappropriate for employees. Blocked sites are divided into categories so that companies can enable access to specific content categories according to the time of day. For example, an employer could permit access to entertainment sites during the lunch hour or after hours.
  • [0009]
    To that end, software can be used to deny employees access to sites in such areas as astrology and mysticism, games, entertainment, travel, news, job searches, investment, hobbies and more. In other words, anything an employee might want to do that's not directly related to his job.
  • [0010]
    Access levels can be defined on the basis of time of day or the day of the week. The employer could, for example, give users access to a wider range of web sites after 6 P.M. or on weekends. The employer could also define different levels of Internet access for different individuals or groups in the company.
  • [0011]
    A human resource department, for example, could have access to job search Web sites that might be off-limits to other employees. The chief executive could have unlimited access and still restrict what others can do.
  • [0012]
    Filtering software is not without limitations. Much of the software won't run on systems with a modem connection to the Internet. The filtering software requires a server-based mechanism such as a Microsoft or Netscape proxy server or a Check Point Firewall.
  • [0013]
    While the server-based mechanisms have the advantage of not requiring software to be installed on the client machine, they are incapable of monitoring the actual time spent by the user on any given web page. In addition, LAN server-based mechanisms have the disadvantage of imposing significant performance penalties, especially if the number of clients connected to it is large. This approach usually requires technical expertise since it is difficult to administer and configure.
  • [0014]
    Filtering software does a good job of blocking out the offensive sites, but the software may inadvertently restrict information that the employee may need. For example, an employee researching breast cancer, or an HR director putting together a presentation on the topic of sexual harassment in the workplace may not be able to obtain the relevant information. Additionally, filtering software requires constant updating due to new web sites with offensive content going on-line daily.
  • [0015]
    Also, a moderate amount of employee use of the Internet for personal business isn't necessarily counterproductive. Just as most employers tolerate a certain amount of personal phone calls at work, it may be perfectly acceptable for an employee to use a company PC to make personal travel arrangements, book a dinner reservation, check a stock portfolio or read the newspaper during personal break time.
  • [0016]
    Another software industry solution, client-based filters (e.g., Surfwatch and CyberPatrol) which prevent users from accessing undesirable Web sites, does not adequately overcome the limitations of centralized filtering. Designed largely as parental control tools for individualized PCs, these programs are easily disabled by uninstalling (accidently or intentionally) the filter. For example, a Windows user can simply reinstall the Windows OS, replacing certain driver files of the filter. This disables the filter and provides the user with unrestricted access to the Internet.
  • [0017]
    A solution has not yet been proposed to deal with the problems posed by Internet access in the corporate environment. There is a need for a simple system and methods providing companies the means to monitor the exchanges permissible between a local computer and an external network or WANs, including the Internet.
  • SUMMARY OF THE INVENTION
  • [0018]
    Perhaps the two aspects of Internet access most important to the productivity of an organization are 1) the ability to monitor the amount of time employees spend on the Internet and 2) the web sites employees visit while on the Internet. Although the Internet is an increasingly important business tool, it also poses a temptation for abuse. Employees may be tempted to pursue their own private interests while on the job. The Internet access monitoring system of the present invention addresses this problem by allowing an organization to monitor employee Internet access on a time-spent-per-page and total time-per-week basis. The actual monitoring can be done in a variety of ways, including monitoring the time and web site history of an employee actively interacting with the Internet, and/or monitoring the complete time and web site history of particular groups of users accessing the Internet.
  • [0019]
    The present invention addresses the bandwidth concerns by limiting access to the Internet to certain times of the day and monitoring employees. When an employee knows that he is being monitored, he is much less likely to surf inappropriate material on the Internet.
  • [0020]
    The present invention provides system and methods for client-based monitoring of Internet access, which operate in conjunction with an enforcement supervisor located on a remote web server. In accordance with the present invention, a central filter and centralized enforcement supervisor are not used. Instead, the present invention provides a client side mechanism for tracking Internet usage on a time-spent-per-web-page basis within a browser such as Microsoft Internet Explorer and transmitting this information to a remote web site (over the Internet or any other network) where authorized personnel can access the information over the Internet.
  • [0021]
    The client-based monitoring module in a preferred embodiment performs all the monitoring and logging work. Each time the user navigates to a new web page, the previous web page title, location (Universal Resource Locator or URL), and time spent are then stored by the client component in memory on the client computer. The web page title and URL are obtained from system notifications from the browser to the client component. The client computer uploads the log containing the web page information to a web-based supervising module.
  • [0022]
    The present invention provides guidelines that can include criteria such as total time a user can be connected to the Internet (e.g., per day, week, month or the like), and the time a user can interactively use the Internet (e.g., per day, week, month, or the like). These guidelines can be qualified by optionally specifying: to whom should a rule apply (list of users, list of work groups, or all); time of day when the rule should be applied (for example from 9 a.m. to 5 p.m.).
  • [0023]
    All the logged information is viewable by an administrator in either a summary format (total number of hours spent by each user) or in a detailed format (time per web page with details such as the web page tile, URL, and time) by visiting the web site and entering the Administrator authentication information. This function is the same as that of a history log except that a web-based format does not permit modification by the client machine.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • [0024]
    The accompanying drawing is incorporated into and forms a part of the specification to illustrate the preferred embodiments of the present invention. Various advantages and features of the invention will be understood from the following detailed description taken in connection with the appended claims and with reference to the attached drawing figures in which:
  • [0025]
    [0025]FIG. 1 is a block diagram providing an overview of a Internet-based (client/server) system in which the present invention is embodied;
  • [0026]
    [0026]FIG. 2 is a block diagram providing an overview of a Internet-based (client/server) system in which the present invention may be embodied;
  • [0027]
    [0027]FIG. 3 is a block diagram illustrating a client-side monitor;
  • [0028]
    [0028]FIG. 4 is a block diagram illustrating a web-side supervisor server;
  • [0029]
    [0029]FIG. 5 is a flow chart illustrating a method of the present invention for handling a user session;
  • [0030]
    [0030]FIG. 6 is a flow chart illustrating a method of the present invention for handling the acquisition of the Internet monitoring system; and
  • [0031]
    [0031]FIG. 7 is a bit map screen shot illustrating a preferred user interface or “wizard” dialog for configuring first-time user registration.
  • DETAILED DESCRIPTION OF THE INVENTION
  • [0032]
    Preferred embodiments of the invention will now be described with reference to various examples of how the invention can best be made and used. Like reference numerals are used throughout the description and several views of the drawing to indicate like or corresponding parts.
  • [0033]
    The present invention provides system and methods for client-based monitoring which operate in conjunction with a web-based enforcement supervisor. In accordance with the present invention, a central filter and centralized enforcement supervisor are not used. Instead, the present invention provides a client side mechanism for tracking Internet usage on a time-spent-per-web-page basis within an Internet browser such as Microsoft Internet Explorer and transmitting this information to a remote web site (over the Internet or any other network) so that it is easily accessed by authorized personnel over the Internet.
  • [0034]
    An Internet access monitoring system, constructed in accordance with the present invention, preferably supports the maintenance of a detailed log of Internet access, for enforcing the guidelines. An Internet access monitoring system, constructed in accordance with the present invention, preferably supports guidelines. The present invention provides guidelines that can include criteria such as total time a user can be connected to the Internet (e.g., per day, week, month or the like), and the time a user can interactively use the Internet (e.g., per day, week, month, or the like). These guidelines can be qualified by optionally specifying: to whom should a rule apply (list of users, list of work groups, or all), and time of day when the rule should be applied (for example from 9 a.m. to 5 p.m.).
  • [0035]
    All the logged information is viewable by an administrator in either a summary format (total number of hours spent by each user) or in a detailed format (time per web page with details like the web page tile, URL, and time) by visiting the web site and entering the Administrator authentication information. This function is the same as that of a history log except that a web-based format does not permit modification by the client machine.
  • [0036]
    The present invention addresses the bandwidth concerns by limiting access to the Internet to certain times of the day and monitoring employees. When an employee knows that he is being monitored, he is much less likely to surf inappropriate material on the Internet.
  • [0037]
    I. System Hardware
  • [0038]
    The system hardware of the client-side Internet access monitoring module and server-based Internet access supervisor employed in a preferred embodiment, will now be described in further detail.
  • [0039]
    Referring to FIG. 1 and FIG. 2, the invention is generally embodied on a computer system 10 including one or more personal computer systems, such as a desk-top personal computer 12. Preferably the personal computer system is an IBM PC-compatible personal computer, available from a variety of vendors (including IBM of Armonk, N.Y., and Compaq Computer Corporation of Houston, Tex.), but the personal computer system 12 could be a wireless telephone with Internet capability or the like. In the alternative, with the growth of remote computerized appliances, the present invention is useful to control television viewing, computer game usage, cell phone usage and the like.
  • [0040]
    Referring to FIG. 1, the personal computer system 12 is connected to a Wide Area Network (“WAN”) 14 by a modem 16. In the preferred embodiment, the WAN is the Internet or World Wide Web (“WWW”). Preferably, the modem 16 is a SDSL or ADSL service (e.g., available from Jump.net of Austin, Tex.), but the modem could be a conventional 56K modem (e.g., available from U.S. Robotics), ISDN line or the like. Referring to FIG. 2, in an alterative embodiment, the personal computer system 12 is connected to the WAN 14 by a Network Interface Card (“NIC”) 18 and a Local Area Network (“LAN”) 20 which has a server 22 and a firewall 24.
  • [0041]
    Referring to FIG. 1 and FIG. 2, the personal computer system 12 includes a client-side Internet access monitoring module 26 of the present invention. The Internet allows access to a multitude of web servers 28. Of particular interest is a supervisor web server 30 which includes a web-side Internet access monitoring supervisor module 32 of the present invention and a firewall 24. In an alternative embodiment, the web-side Internet access monitoring supervisor module 32 is located on the server 22.
  • [0042]
    The web site Internet access monitoring supervisor module 32 and client-side Internet access monitoring module or client module 26 prevent users from circumventing Internet monitoring, either accidentally or intentionally. It should be difficult, for instance, for a user to circumvent Internet monitoring by connecting to the Internet through a dial-up connection (e.g., connecting to an ISP with a modem) . The monitoring system of the present invention is triggered by the Internet browser, not the Internet connection, making circumvention difficult. Similarly, it should be difficult for a user to circumvent access rules by installing, uninstalling or tampering with components of his own PC or the monitoring system. The minimum number and small size of client-side components of the present invention makes tampering difficult and software conflicts unlikely. Each personal computer system has one client-side module that is less than one megabyte in size.
  • [0043]
    II. System Software and Operation
  • [0044]
    Construction and operation of the client-side Internet access monitoring module, including its interaction with server-based components employed in a preferred embodiment, will now be described in further detail.
  • [0045]
    A. User Session with Respect to the Client-side Monitoring Module
  • [0046]
    A user session with respect to the client-side monitoring module will now be described in further detail. Referring to FIG. 3, the personal computer system 12 includes the client-side monitoring module 26, an operating system (OS) 34, and an Internet browser 36. The client-based monitoring module 26, which in a preferred embodiment performs all the monitoring and logging work, is responsible for intercepting universal resource link requests between an Internet browser and a network programming interface.
  • [0047]
    The operating system has the network programming interface component 38 for communications between the Internet browser 36 and the WAN or Internet 14. Preferably, the operating system (OS) is Microsoft Windows 95, 98, 2000, or NT (available from Microsoft Corporation of Redmond, Washington), but the OS 34 could be Linux, Apple OS/9 or another operating system. Microsoft's Windows operating system has a network programming interface component 38 known as Windows sockets for use by application software to communicate on the Internet. The Windows sockets is implemented in the Windows operating system as a dynamic link library named “WSOCK32.DLL.” A prior version for 16-bit software is implemented in a file named “WINSOCK.DLL.”
  • [0048]
    An Internet browser 36 which utilizes the network programming interface 38 for communicating on the Internet generally does not control the computer's connection to the Internet 14, but rather simply calls the Windows sockets to communicate over the Internet 14. Preferably, the Internet browser 36 is Internet Explorer (available from Microsoft Corporation of Redmond, Washington), but the Internet browser could be some other browser such as Netscape Navigator.
  • [0049]
    Internet Explorer allows certain of its function calls to the network programming interface 38 to be monitored by the software module, including the client-side module, with a hook interface 40. The hook interface 40 is a function exported by the client-based software or other monitoring software module for monitoring requests from Internet Explorer to the network programming interfaces 38. In the computer software field, the term “hook” generally refers to the ability for one application to monitor or receive notification about function calls made by another application to yet a third application, a system component, or an application programming interface. A “hook interface” is a mechanism by which an application registers to receive notification information from a hook.
  • [0050]
    The client module 26 is programmed to intercept events from Internet Explorer browser 36 by following these steps:
  • [0051]
    1. Registering itself in the Windows Registry to be loaded upon browser startup;
  • [0052]
    2. Implementing the IObjectWithSite interface published by Microsoft; and
  • [0053]
    3. Implementing the IObjectWithSite::SetSite( ) method. This method allows the application to request a pointer to Internet Explorer's IWebBrowserEvents2 Interface. This interface may be used to intercept events from Internet Explorer.
  • [0054]
    The following Microsoft links have further technical details, which are incorporated herein by reference:
  • [0055]
    http://support.microsoft.com/support/kb/articles/Q179/2/30.A SP;
  • [0056]
    http://msdn.microsoft.com/workshop/browser/webbrow-ser/reference/IFaces/DWebBrowserEvents2/DWebBrowserEvents2.a sp; and
  • [0057]
    http://support.microsoft.com/support/kb/articles/Q179/2/30.A SP.
  • [0058]
    Alternatively, the open source version of the Netscape Navigator browser (e.g., available from www.mozilla.org) can be configured to allow certain of its function calls to the network programming interface 38 to be monitored by a software module, such as the client-side module 26, with the hook interface 40.
  • [0059]
    Whenever the hook interface 40 hooks a URL request to the network programming interface 38, the hook interface determines that the Internet browser 36 is attempting to communicate over the Internet 14. The hook interface 40 sends the URL request to the client-based monitor and sends the URL request to the network programming interface 38.
  • [0060]
    A user might attempt to circumvent the system by loading an authorized browser. This invention has the ability to perform a periodic search of the files on the personal computer system or client computer 12 to determine file names associated with other browsers. This is accomplished by comparing a compiled list of file names associated with unauthorized browsers. Violations are reported to a designated administrator via email.
  • [0061]
    The client-based monitor contains a user authentication application 42, a timer 44, an user display application 46, and a temporary history log cache 48. The user authentication module 42 presents the user with a log-in prompt, accepts the user's name and password and forwards this information to the web-based server.
  • [0062]
    The timer application 44 synchronizes its internal time to the server time. The current time is maintained by the client component 26 independently of the computer system time in order to prevent users from subverting the system by changing the time clock in the OS 34.
  • [0063]
    The timer application processes (i) the number of permitted minutes/week, (ii) the number of minutes already consumed this week, (iii) the monitored and restricted start and end times, and (iv) the current system time at the web-based server 30.
  • [0064]
    Also, the timer application 44 processes the URL requests from the hook interface 40. The timer application 44 logs all the URL requests in the temporary history log cache 48 on a time-spent per page basis. By logging all the times that URL requests are made, the system can create a comprehensive representation of a user's Internet activities.
  • [0065]
    The timer 44 of the client module 26 is programmed to record time-spent-per-URL by following these steps:
  • [0066]
    1. Implementing the DwebBrowserEvents2::Navigate-Complete2 method to be notified each time a new URL is navigated to;
  • [0067]
    2. Each time a new notification is received, the URL is stored in memory along with the current time at which it is received. The time spent on the previous URL is the difference between the current time and the time stored corresponding to the previous URL; and
  • [0068]
    3. The temporary history log cache 48 will contain the sequence of URL, begin time and time spent records in memory on the client module 26.
  • [0069]
    If the user exceeds permitted time during the monitored period, the client component 26 will notify the user and request that the user terminate the browser 36. If the user fails to terminate the browser 36, then a violation will be reported to the web server 30 and an email notification will be sent to a supervisor. Likewise, if the current time period changes from monitored to restricted, then the user is notified.
  • [0070]
    The user display application 46 provides a periodically updated visual display to the user. This display includes the amount of authorized time a user has remaining on the Internet and the period of use (restricted/unrestricted). The timer 44 considers the time the browser 36 is minimized to be inactive time. The client-based module 26 knows when the browser 36 is minimized by utilizing the following methodology: upon startup a reference (or handle) to the main browser window is obtained and stored in memory by the client module. At regular intervals this reference handle is queried for its current state (by using the “IsIconic( )” OS API) in order to determine if the window has been minimized or not. In an alternative embodiment, the time-keeping function of this invention allows for calender functions, including on-the-job timekeeping for remote employee users.
  • [0071]
    The temporary log cache 48 stores the time stamped URL requests sent from the timer application. Also, the temporary log cache 48 stores the gateway web site. The gateway web site is the web site the user is directed to after authentication. The gateway web site can either be determined by the subscriber (employer) or through commercial arrangements with various companies interested in becoming a point of entry for users. This can be established by creating a brief user profile upon user registration. The user can then be introduced to a number of sites which are of particular interest to their profession or group. This entry point is similar to the home page concept, with the exception that it cannot be changed by the user.
  • [0072]
    Referring to FIG. 5, a user begins an Internet session by opening his Internet browser. The “browser helper object” model offered by Internet Explorer allows the client component to load up whenever the browser starts. At step 50, a user authentication module presents the user with a log-in prompt. The user is asked to enter his user name and password.
  • [0073]
    At step 52, the Internet browser 36 automatically connects to the supervisor web site 30. At step 54, the client component transmits the authentication information for verification to the web site using the same protocol used by the browser (i.e., an HTTP or HTTPS POST operation). The web site server 32 indicates success or failure.
  • [0074]
    In the case of authentication failure, the user is permitted to either retry, exit the browser 36 or ignore the authentication in which case the client component 26 notifies the web site server 30 of the violation. The web site server 30 saves this information in the database and may send out an e-mail to the administrator. The present invention allows for continued Internet access even in the event of a server failure.
  • [0075]
    In the case of authentication success case, the web server 30 returns the following information and guidelines: (i) number of permitted minutes/week; (ii) number of minutes already consumed this week; (iii) the monitored and restricted start and end times; and (iv) the current system time at the server. In the preferred embodiment, the server returns a gateway web site.
  • [0076]
    The user display application of the client component notifies the user about the remaining time as well as the current period (Monitored, Restricted or Unrestricted) and then starts a visible timer on the client machine. This timer is used to track the time spent on every web page visited by the user.
  • [0077]
    At step 56, the user is presented with a gateway web site. At step 58, a user Internet session begins. The user may go to any URL. Each time the user navigates to a new web page, the previous web page title, location (Universal Resource Locator or URL), and time spent are then stored by the client component 26 in memory on the client computer. The web page title and URL are obtained from system notifications from the browser to the client component 26.
  • [0078]
    Periodically, at step 60, the client monitoring module 26 reconnects to the server web site. Upon reaching preset limits (such as number of records, time elapsed, etc.) or on termination of the browser process, the client component 26 will transmit this cached information to the web site server 30. The latter will store this information in a database under the appropriate user's history log.
  • [0079]
    At step 62, the user ends the Internet session by closing his web browser. At step 64, the client monitoring module 26 connects to the supervisor web site 30. The supervisor web site authenticates the log-in information and the client monitoring module 26 uploads the temporary history log cache. The user Internet session is completed.
  • [0080]
    If the user exceeds his permitted time during the monitored period, then the client component 26 will notify the user and request that the browser 36 be terminated. If the user fails to do so, then the violation is reported as before. Likewise, if the current time period changes from Monitored to Restricted, then again the user is notified as before.
  • [0081]
    B. User and Administrative Sessions with Respect the Web-Based Supervisor Module
  • [0082]
    The operation of the web-based supervisor module will not be described in detail. The system allows administrators and users to log-in to the web-based supervisor server and read reports on Internet usage. The reports of the supervisors are much more detailed. Referring to FIG. 4, the web-based supervisor 30 includes an administrative web pages application 68, a client communication interface 70, a permanent history log 72, an authentication service and configuration information storage application 74, and an email notification service application 76.
  • [0083]
    The administrative web pages application 68 processes and presents all web-page requests which the server receives. The client communication interface 70 receives and processes requests from the client-based module 70.
  • [0084]
    The permanent history log records the information from the client-based temporary history cache 48. This information is viewable by an administrator in either a summary format (total number of hours spent by each user) or in a detailed format (time per web page with details like the web page tile, URL, and time) by visiting the web site and entering the Administrator authentication information. This function is the same as that of a history log of Internet Explorer, Netscape Navigator, or Netscape Communicator except that a web-based format does not permit modification by the client machine.
  • [0085]
    The supervisor web site authenticates the log-in information and the client monitoring module uploads the temporary history log cache 48 to the server web site 30. The client communication interface accepts the temporary history log cache and sends it to a permanent history log 72.
  • [0086]
    Referring to FIG. 6, a company representative acquires the Internet monitoring system. At step 74, the company representative visits the server web site and decides to register his company for the Internet monitoring system. At step 76, the company representative clicks on “first time user registration” hyperlink. At step 78, the company representative answers questions about his company. These questions include company name, address, and the like. Referring to FIG. 7, a First-Time User Registration interface is shown.
  • [0087]
    Referring again to FIG. 6, At step 80, the company representative decides how many licenses to purchase. At step 82, the company representative sets up the company hierarchy. In order to effectively manage Internet access, a system should support existing organizational structures. A department supervisor, for example, should be able to determine the needs of his subordinates within a safe overall framework. This is important for the overall success of Internet access within the organization as it allows supervisors to address any problems which arise early on (before they become serious personnel issues).
  • [0088]
    Accordingly, the Internet access monitoring system of the present invention supports a hierarchical structure where individual supervisors can monitor and set the access rules for their individual workgroups without affecting others in the organization. At the same time, a central authority (e.g., corporate IS department) still can establish general rules that cannot be overwritten on the workgroup level.
  • [0089]
    The company representative proceeds to configure groups of users. Each group may be assigned times during the day when users belonging to that group may be restricted from accessing the Internet and other times during which they may be permitted monitored access to the Internet. During a monitored period, all Internet access is logged and timed. Other times of the day are considered to be unrestricted periods during which Internet access is not monitored.
  • [0090]
    The company representative then proceeds to set up individual users belonging to these groups by inputting names, e-mail addresses and authentication information for each user. At step 84, the web site sends an e-mail to each new user with information about downloading and installing the client-side software component required for client-based monitoring.
  • III. EXAMPLES
  • [0091]
    Three examples demonstrate the effectiveness of this system. Consider, for instance, employee Ralph who begins routinely accessing pornographic sites on the Internet during business hours. Ralph's activities are prohibited by company policy, and are taking up vital bandwidth. Using current technology, the company's IS department would likely not detect the activity for weeks, or even months, as the department's main focus is to keep the company's networks running smoothly, not to track individual activities. At the point when the activity is uncovered, Ralph might have already violated company policy to the point where his manager has no choice but to dismiss Ralph. If Ralph's Internet access activity is monitored locally by Ralph's supervisor, however, the supervisor can notice the prohibited activity almost immediately. After reminding Ralph of company policy, the supervisor can continue to monitor Ralph's on-line activities and head off the need to terminate Ralph.
  • [0092]
    As another example, consider Donna's company, a small company that cannot afford an expensive server and the technical expertise to support the server. Donna wants to monitor her employees' Internet access, but can not afford a conventional Internet monitoring system requiring a LAN server and technical expertise. However, Donna can afford the Internet access monitoring system of the present invention since it does not require a local server or technical expertise.
  • [0093]
    As another example, consider Tommy, an employee who normally has very little Internet access but needs to write a competitive analysis for a new product. To complete this task effectively, Tommy requires Internet access for performing required research. Conventionally, Tommy's supervisor would call the company's IS department to arrange the appropriate Internet access, a process requiring days or even weeks. However using the Internet access monitoring system of the present invention, Tommy accesses the Internet as required to finish his project and the Administrator does not act on the warning e-mail.
  • [0094]
    Although the invention has been described with reference to certain exemplary arrangements, it is to be understood that the forms of the invention shown and described are to be treated as preferred embodiments. Various changes, substitutions and modifications can be realized without departing from the spirit and scope of the invention as defined by the appended claims.
Patent Citations
Cited PatentFiling datePublication dateApplicantTitle
US4672572 *May 21, 1984Jun 9, 1987Gould Inc.Protector system for computer access and use
US5802304 *Apr 18, 1996Sep 1, 1998Microsoft CorporationAutomatic dialer responsive to network programming interface access
US5961598 *Jun 6, 1997Oct 5, 1999Electronic Data Systems CorporationSystem and method for internet gateway performance charting
US5983270 *Apr 2, 1997Nov 9, 1999Sequel Technology CorporationMethod and apparatus for managing internetwork and intranetwork activity
US5987611 *May 6, 1997Nov 16, 1999Zone Labs, Inc.System and methodology for managing internet access on a per application basis for client computers connected to the internet
US5991807 *Jun 24, 1996Nov 23, 1999Nortel Networks CorporationSystem for controlling users access to a distributive network in accordance with constraints present in common access distributive network interface separate from a server
US6018619 *May 24, 1996Jan 25, 2000Microsoft CorporationMethod, system and apparatus for client-side usage tracking of information server systems
US6026440 *Jan 27, 1997Feb 15, 2000International Business Machines CorporationWeb server account manager plug-in for monitoring resources
US6035404 *Sep 9, 1997Mar 7, 2000International Business Machines CorporationConcurrent user access control in stateless network computing service system
US6070190 *May 11, 1998May 30, 2000International Business Machines CorporationClient-based application availability and response monitoring and reporting for distributed computing environments
US6195697 *Jun 2, 1999Feb 27, 2001Ac Properties B.V.System, method and article of manufacture for providing a customer interface in a hybrid network
US6397336 *Dec 19, 2000May 28, 2002Harris CorporationIntegrated network security access control system
US6526341 *Jul 29, 1999Feb 25, 2003Qualcomm, Inc.Paperless log system and method
US6795856 *Jun 28, 2000Sep 21, 2004Accountability International, Inc.System and method for monitoring the internet access of a computer
US7644422 *Oct 31, 2002Jan 5, 2010The Nielsen Company (Us), LlcInteractive service device metering systems
US7668861 *Sep 20, 2007Feb 23, 2010Yahoo! Inc.System and method to determine the validity of an interaction on a network
Referenced by
Citing PatentFiling datePublication dateApplicantTitle
US7206835 *May 2, 2002Apr 17, 2007K-Plex Inc.User operation log recording and storing apparatus using object-oriented technology
US7444358 *Aug 19, 2005Oct 28, 2008Claria CorporationMethod and apparatus for responding to end-user request for information-collecting
US7536459 *Feb 28, 2006May 19, 2009Microsoft CorporationPage-view recording with click-thru tracking
US7543059Sep 2, 2005Jun 2, 2009Microsoft CorporationPage-view recording with click-thru tracking
US7627664 *Mar 20, 2001Dec 1, 2009Hitachi, Ltd.Method and apparatus for remotely controlling a terminal by a control terminal and storing control history information at the terminal being remotely controlled
US7631007Apr 12, 2005Dec 8, 2009Scenera Technologies, LlcSystem and method for tracking user activity related to network resources using a browser
US7730120 *Oct 24, 2007Jun 1, 2010Compete, Inc.Systems and methods for clickstream analysis to modify an off-line business process involvng cross promotion
US7797371Oct 24, 2007Sep 14, 2010Compete, Inc.Systems and methods for clickstream analysis to modify an off-line business process involving determining related or complementary items
US7814139Oct 24, 2007Oct 12, 2010Complete, Inc.Systems and methods for clickstream analysis to modify an off-line business process involving forecasting demand
US7836009Aug 19, 2005Nov 16, 2010Claria CorporationMethod and apparatus for responding to end-user request for information-ranking
US7890451Nov 12, 2007Feb 15, 2011Compete, Inc.Computer program product and method for refining an estimate of internet traffic
US7904554 *Dec 23, 2009Mar 8, 2011Aol Inc.Supervising user interaction with online services
US7977049Feb 8, 2005Jul 12, 2011President And Fellows Of Harvard CollegeMethods and compositions for extending the life span and increasing the stress resistance of cells and organisms
US7979544Jun 30, 2009Jul 12, 2011Compete, Inc.Computer program product and method for estimating internet traffic
US8017634Jul 1, 2005Sep 13, 2011President And Fellows Of Harvard CollegeCompositions for treating obesity and insulin resistance disorders
US8073866Mar 16, 2006Dec 6, 2011Claria Innovations, LlcMethod for providing content to an internet user based on the user's demonstrated content preferences
US8078602Dec 17, 2004Dec 13, 2011Claria Innovations, LlcSearch engine for a computer network
US8086697Oct 31, 2005Dec 27, 2011Claria Innovations, LlcTechniques for displaying impressions in documents delivered over a computer network
US8095621Oct 24, 2007Jan 10, 2012Compete, Inc.Systems and methods for clickstream analysis to modify an off-line business process involving automobile sales
US8099496Oct 24, 2007Jan 17, 2012Compete, Inc.Systems and methods for clickstream analysis to modify an off-line business process involving matching a distribution list
US8135833Jun 1, 2011Mar 13, 2012Compete, Inc.Computer program product and method for estimating internet traffic
US8170912Nov 25, 2003May 1, 2012Carhamm Ltd., LlcDatabase structure and front end
US8201223Nov 2, 2007Jun 12, 2012Joanne WalkerSystems and methods for computer implemented treatment of behavorial disorders
US8242171Jan 7, 2010Aug 14, 2012President And Fellows Of Harvard CollegeMethod for reducing the weight of a subject or inhibiting weight gain in a subject
US8255413Aug 19, 2005Aug 28, 2012Carhamm Ltd., LlcMethod and apparatus for responding to request for information-personalization
US8316003Oct 12, 2009Nov 20, 2012Carhamm Ltd., LlcUpdating content of presentation vehicle in a computer network
US8356097Jan 27, 2012Jan 15, 2013Compete, Inc.Computer program product and method for estimating internet traffic
US8620952Jan 3, 2007Dec 31, 2013Carhamm Ltd., LlcSystem for database reporting
US8626834Sep 27, 2010Jan 7, 2014Compete, Inc.Clickstream analysis methods and systems related to modifying an offline promotion for a consumer good
US8645941Mar 6, 2006Feb 4, 2014Carhamm Ltd., LlcMethod for attributing and allocating revenue related to embedded software
US8689238Dec 23, 2011Apr 1, 2014Carhamm Ltd., LlcTechniques for displaying impressions in documents delivered over a computer network
US8776222Jan 6, 2012Jul 8, 2014Facebook, Inc.Message screening system
US8788321Sep 4, 2007Jul 22, 2014Thomas Publishing CompanyMarketing method and system using domain knowledge
US8846724Jul 27, 2011Sep 30, 2014President And Fellows Of Harvard CollegeCompositions for treating obesity and insulin resistance disorders
US8856322Jul 9, 2011Oct 7, 2014Openpeak Inc.Supervisory portal systems and methods of operation of same
US8914494Jan 30, 2009Dec 16, 2014Clinton D. BunchSystem and method for user behavioral management in a computing environment
US8938534Dec 22, 2011Jan 20, 2015Ss8 Networks, Inc.Automatic provisioning of new users of interest for capture on a communication network
US8954580Jan 14, 2013Feb 10, 2015Compete, Inc.Hybrid internet traffic measurement using site-centric and panel data
US8972612Apr 5, 2012Mar 3, 2015SSB Networks, Inc.Collecting asymmetric data and proxy data on a communication network
US9058323Jan 20, 2012Jun 16, 2015Ss8 Networks, Inc.System for accessing a set of communication and transaction data associated with a user of interest sourced from multiple different network carriers and for enabling multiple analysts to independently and confidentially access the set of communication and transaction data
US9083666Sep 13, 2012Jul 14, 2015Facebook, Inc.Message screening system utilizing supervisory screening and approval
US9123056Nov 26, 2013Sep 1, 2015Compete, Inc.Clickstream analysis methods and systems related to modifying an offline promotion for a consumer good
US9124493Mar 11, 2014Sep 1, 2015Openpeak Inc.System and method for ensuring compliance with organizational polices
US9241006 *Dec 27, 2013Jan 19, 2016Tencent Technology (Shenzhen) Company LimitedMethod and system for detecting website visit attempts by browsers
US9241916Dec 13, 2007Jan 26, 2016President And Fellows Of Harvard CollegeCognitive performance with sirtuin activators
US9270647Dec 6, 2013Feb 23, 2016Shape Security, Inc.Client/server security by an intermediary rendering modified in-memory objects
US9292860Jul 7, 2015Mar 22, 2016Compete, Inc.Clickstream analysis methods and systems related to modifying an offline promotion for a consumer good
US9325799Jun 10, 2014Apr 26, 2016Joanne WalkerSystems and methods for computer implemented treatment of behavioral disorders
US9350762Sep 25, 2012May 24, 2016Ss8 Networks, Inc.Intelligent feedback loop to iteratively reduce incoming network data for analysis
US9356954 *Feb 10, 2015May 31, 2016Shape Security, Inc.Intercepting and supervising calls to transformed operations and objects
US9398071Jan 29, 2013Jul 19, 2016Amazon Technologies, Inc.Managing page-level usage data
US9438625Sep 9, 2014Sep 6, 2016Shape Security, Inc.Mitigating scripted attacks using dynamic polymorphism
US9438694Jan 29, 2013Sep 6, 2016Amazon Technologies, Inc.Managing page-level usage data
US9479529Apr 6, 2015Oct 25, 2016Shape Security, Inc.Polymorphic security policy action
US9495446Mar 1, 2010Nov 15, 2016Gula Consulting Limited Liability CompanyMethod and device for publishing cross-network user behavioral data
US9501781Mar 14, 2016Nov 22, 2016Comscore, Inc.Clickstream analysis methods and systems related to improvements in online stores and media content
US9577889 *Jan 29, 2013Feb 21, 2017Amazon Technologies, Inc.Managing page-level usage data
US20020035627 *Mar 20, 2001Mar 21, 2002Hiromi SutouTerminal for computer network and recording method of control history
US20030051033 *May 2, 2002Mar 13, 2003Koji KusumotoUser operation log recording and storing apparatus using object-oriented technology
US20040163087 *Feb 14, 2003Aug 19, 2004Carl SandlandComputer program code and method for delivering external data to a process running on a virtual machine
US20060015614 *Sep 2, 2005Jan 19, 2006Microsoft CorporationPage-view recording with click-thru tracking
US20060041562 *Aug 19, 2005Feb 23, 2006Claria CorporationMethod and apparatus for responding to end-user request for information-collecting
US20060136586 *Feb 28, 2006Jun 22, 2006Microsoft CorporationPage-View Recording with Click-Thru Tracking
US20060230058 *Apr 12, 2005Oct 12, 2006Morris Robert PSystem and method for tracking user activity related to network resources using a browser
US20070088862 *Oct 13, 2005Apr 19, 2007Burkman Troy FMethod and system for optimizing streaming media
US20080059310 *Sep 4, 2007Mar 6, 2008Thomas Publishing CompanyMarketing method and system using domain knowledge
US20080109872 *Nov 2, 2007May 8, 2008Joanne WalkerSystems and methods for computer implemented treatment of behavorial disorders
US20080183796 *Oct 24, 2007Jul 31, 2008Man Jit SinghClickstream analysis methods and systems
US20080183867 *Oct 24, 2007Jul 31, 2008Man Jit SinghClickstream analysis methods and systems
US20080195750 *Feb 9, 2007Aug 14, 2008Microsoft CorporationSecure cross platform auditing
US20090144421 *Jan 30, 2009Jun 4, 2009Bunch Clinton DSystem and Method for User Behavioral Management in a Computing Environment
US20100030894 *Jun 30, 2009Feb 4, 2010David CancelComputer program product and method for estimating internet traffic
US20100042718 *Oct 22, 2009Feb 18, 2010Morris Robert PSystem And Method For Tracking User Activity Related To Network Resources Using A Browser
US20100251270 *Mar 24, 2010Sep 30, 2010Comscore, Inc.Selective Mobile Metering
US20120221666 *Feb 24, 2011Aug 30, 2012Openpeak Inc.System and method for controlling access to electronic devices
US20140115700 *Dec 27, 2013Apr 24, 2014Tencent Technology (Shenzhen) Company LimitedMethod and system for detecting website visit attempts by browsers
US20150207816 *Feb 10, 2015Jul 23, 2015Shape Security, Inc.Intercepting and supervising calls to transformed operations and objects
US20160261629 *May 18, 2016Sep 8, 2016Shape Security, Inc.Intercepting and supervising calls to transformed operations and objects
USRE45558 *Mar 8, 2013Jun 9, 2015Facebook, Inc.Supervising user interaction with online services
Classifications
U.S. Classification709/224
International ClassificationH04L29/06, H04L12/26
Cooperative ClassificationH04L12/2602, H04L63/1408, G06F2221/2101, H04L63/0245, H04L43/00, H04L63/083
European ClassificationH04L63/02B2, H04L63/14A, H04L43/00, H04L12/26M
Legal Events
DateCodeEventDescription
Nov 23, 2004ASAssignment
Owner name: ACCOUNTABILITY INTERNATIONAL, INC., TEXAS
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:BUNCH, CLINTON D.;REEL/FRAME:015403/0278
Effective date: 20041116