Patent Grant
10693647
This disclosure relates generally to social networking engines.
A significant challenge facing current one-to-many information sharing platforms such as social networks, are public policy concerns over privacy laws that trouble a great many users because the social network administrators currently have the potential for tremendous visibility into messages, profiles, and demographics for a user community without explicit permission from any particular user in the user community. Social network security and privacy issues result from the large amounts of information that one-to-many information sharing platforms process each day. Features that invite users to participation messages, invitations, photos, open platform applications and other applications often reveal a user's private information. All of this has led to concerns that users are providing far too much information on social networking sites which may have serious implications on their privacy.
An additional challenge facing social networks is the computational complexity and cost to scale to global-sized Internet audiences. As additional feature sets and analytics are being added into a content-suggestion engine, the per-user computational burden may make administration of social networks more expensive. As the size of a social network grows, the burden of identifying matching and responsive content may prove problematic as the number of cycles required to promote, identify, and/or suggest a news item may grow to unsustainable levels as more social connections must be analyzed.
Accordingly, a user or a community may desire one-to-many information sharing platforms that does not involve giving up privacy information to administrators or vendors that implement such information sharing platforms. Additionally, a need also exists for implementing social networking networks that can attend to the need of global-sized Internet audiences and are inexpensive, computationally undemanding and does not compromise user privacy.
Like reference numbers and designations in the various drawings indicate like elements.
Currently, different one-to-many information sharing platforms such as various social networking sites vary in the levels of privacy offered to users. For some social networking sites like Facebook, providing real names and other personal information is encouraged by the site (onto a page known as a ‘Profile’). These information usually consist of birth date, current address, and telephone number(s). Some sites also allow users to provide more information about themselves such as interests, hobbies, favorite books or films, and even relationship status. However, there are other social network sites, such as Match.com, where most people prefer to be anonymous. Thus, linking users to their real identity can sometimes be rather difficult. Nevertheless, individuals can sometimes be identified with face re-identification. Studies have shown that by overlapping similar photographs and profile pictures on one website with similar pictures over multiple sites 15% of the users of a website can be identified.
Social network security and privacy issues result from the large amounts of information these sites process each day. Features that invite users to increase participation messages, invitations, photos, open platform applications and other applications are often the avenues for others to gain access to a user's private information. It is possible for users to block other users from locating them on different social networking sites like Facebook, but this must typically be done by individual basis, and is therefore not commonly used for a wide number of people. Many users do not realize that while they make use of the security features on Facebook, the default setting is restored after each update. All of this has led to many concerns that users are displaying far too much information on social networking sites, which may have serious implications on their privacy.
Modern day advances in data center technology can allow for hosted applications in environments where users and user communities can import their applications to a broader infrastructure. Such advances can allow a social network to be implemented in a zero-knowledge environment, e.g., in a container, where the hosting entity does not have access to the data associated with a user that is stored in the container. In the current specification, methods, systems, and apparatus are described for implementing one-to-many information sharing platforms, e.g., social networks, in a zero-knowledge environment. Specifically, the present specification relates to a method for using software containers to implement social networks that may be configured to act in a zero-knowledge environment. In such implementations, all information pertaining to the social network associated with a user that is stored in the container is solely that of a user unless explicitly shared by the user. In some implementations, the containers may be configured to participate in a publish-and-subscribe network in order to share information. In addition, the containers may be provisioned with controls so that global operators may comply with local privacy rules.
In one configuration, a social network is implemented in which every active person has a dedicated software environment running in a secure sandbox, such as a Linux-based container. The container can be controlled by parameters to enable personalization so that in principle one container can serve all instances across multiple environments and interfaces. However, in other circumstances, local laws, testing and migration may require the use of multiple containers.
Docker may be employed to implement such personal containers. Docker itself relates to an open-source project that automates the deployment of applications inside software containers. Widespread support for Docker allows such containers to be operated across a wide range of environments both in the cloud, locally or hosted. Docker may provide an additional layer of abstraction and automation of operating system-level virtualization, for example, on Linux. Docker uses resource isolation features of the Linux kernel such as cgroups and kernel namespaces to allow independent “containers” to run within a single Linux instance, avoiding overhead associated with starting virtual machines.
In order to realize this level of abstraction, a Linux kernel's namespaces may be employed to isolate an application's view of the operating environment, including process trees, network, user IDs and mounted file systems, while additional structures (e.g., cgroups) provide resource isolation, including the CPU, memory, block I/O and network. A library (e.g., libcontainer) may directly use virtualization facilities provided by the Linux kernel, in addition to using abstracted virtualization interfaces.
In some implementations, a user may elect to include services within the container that operate on its information (or data) to request and display other information, such as advertisements, appropriate for the user without disclosing the information used to target such advertisements to anyone else (e.g., other users, hosting entity, etc.). Hence, other users will not have access to the data stored in the container that is associated with the user unless the user explicitly allows sharing of either portions of or the entirety of the data associated with the user with the other users. This environment is known as a zero-knowledge environment where all the data or information stored in a container associated with a user is solely related to the user. The user can also have the capability to control, customize and operate the container from any communication device such as a desktop computer, a laptop computer, a tablet, a smart phone, etc. In some implementations, the users can use the data stored in the container to create new public social network(s), create private social network(s), participate in existing advanced social network(s), etc.
In some implementations, a personal container may be configured to include advertising. However, the advertising service can operate without sharing any information other than the advertisement selected conforming to a zero-knowledge environment.
A social media architecture may be configured to operate using a publish-and-subscribe system where an identity controls one or more processes that self-administer the identity-specific permissions based on the user's preferences. For example, a social networking community may be built around containers (such as Docker or a similar technology) associated with a particular address (e.g., an IPv6 address or unique Domain Name System address). Each running container may be metered to allow a specified amount of processing power and may facilitate encrypted communications between the user device and the server-side virtual machine processes. In addition, the data for each container may be encrypted to prevent unauthorized use.
In one configuration, a container (e.g., a software container) is an operating system level virtualization or a server virtualization method where the kernel of an operating system allows for multiple isolated user space instances, instead of just one. Such instances (often called containers, virtualization engines (VE), virtual private servers (VPS), or jails) may look and feel like a real server from the point of view of its owners and users. Virtual hosting environments commonly use operating system level virtualization (i.e., software containers), where it is useful for securely allocating finite hardware resources amongst a large number of mutually-distrusting users. System administrators or network administrators may also use it, to a lesser extent, for consolidating server hardware by moving services on separate hosts into containers on the one server.
A container may be configured to operate in environments where privacy is desired or required by law. In some instances, regulations in various countries, such as the Health Insurance Portability and Accountability Act of 1996 (HIPAA) in the U.S., restrict covered entities from disclosing protected health information (“PHI”). The disclosure of PHI is regulated because it is healthcare data with personally identifiable information (“PII”). Many data sources would be considered covered entities because the data sources produce information that may contain PHI, and PHI through its associated PII can be used to positively identify the patient with whom the healthcare data is related. In some implementations, a hospital may offer a social network during a patient's visit where the social network is accessed to coordinate medical care in a manner where patient privacy is mandated by law (e.g., HIPAA). In such implementations, the containers (or virtual machines) used by the hospital to execute the social network may be configured to remove personally identifiable information and instead transmit only labels that anonymously identify the patient.
Examples of the potential dangers to a user that can result from unintended loss of privacy information can include: (i) identity theft loss of personal information such as a user's social security number or date of birth can lead to malicious impersonation of a user for making nefarious credit card applications, purchases, mortgage loan applications, airline ticket purchases, etc.; (ii) sexual predators—due to the high content of personal information placed on social networking sites, as well as the ability of a user to hide behind a pseudo-identity, such sites have become increasingly popular for sexual predators; (iii) stalking—the potential ability for stalking users on social networking sites has been noted. Popular social networking sites make it easy to build a web of friends and acquaintances, and share with them a user's photos, whereabouts, contact information, and interests without ever having the user actually meet many of their friends/acquaintances. With the amount of information that users post about themselves online, it is easy for users to become a victim of stalking without even being aware of the risk; (iv) employment—issues relating to privacy and employment are becoming a concern with regards to social networking sites. As of recently, it has been estimated that approximately one in five employers search social networking sites in order to screen potential candidates. For the majority of employers, such action is to acquire negative information about candidates. It is expected that employers will continue to use social networking sites as a means of monitoring staff and screening potential candidates, and it has been noted that such actions may be illegal under in certain jurisdictions; (v) online victimization—social networks are designed for individuals to socially interact with other people over the Internet. However, some individuals engage in undesirable online social behaviors creating negative impacts on other people's online experiences. It has created a wide range of online interpersonal victimization including sexual advances and harassments; (vii) surveillance—while the concept of a worldwide communicative network seems to adhere to the public sphere model, market forces control access to such a resource. For example, a recent investigation found that many of the applications on Facebook were transmitting identifying information about users and their friends to data aggregators such as, advertisers and internet tracking companies, which is a violation of Facebook's privacy policy. This is because every online move by a user leaves cyber footprints that are rapidly becoming fodder for research without the user's knowledge.
In some implementations, a social network provider may facilitate use of containers in order to join a social network. Upon registering and signing up with a social network, the social network provider may equip the registering user to establish required relationships with a cloud provider that can execute such a container. The containers may be configured to accept permissions from a user and may be configured to operate upon and manipulate an encrypted data set. Once installed on the user's behalf, the user then may manipulate and control the remote container. The remote containers may be configured so that performance may be regulated (permissions, memory size, computing cycles). Personally-identifiable information is controlled by the user and shared only as the user directs. The containers may be migrated or moved depending on device or virtual machine load, social network computational burden (e.g., number of interconnections), changing security requirements (e.g., receiving a security alert or indication of compromise or suspicious activity), or logical requirement (e.g., a desire to configure or develop another instantiation of a new social network or social subnetwork (interest community)).
In the context of a social networking application, “friendship” or a user-approved degree of trust between users begins by with two users mutually agreeing to share encryption keys so each can read the other's information. The respective keys for peers (fellow users) may be stored in an encrypted environment. Each running environment may be signed with the associated key so that the access device can trust the running environment. The container itself may be signed and certified as being secure. In some legal jurisdictions, an access “backdoor” or wiretapping interface may be required and employed to comply with applicable wiretapping provisions to ensure that law enforcement and other authorized users have access to desired information. In these configurations, the user would have to trust the code associated with the wiretap. One advantage of container-based social network is that the constituent components are self-contained so information entering or leaving the environment can be secured and/or tracked.
The communication device 140 can be any communication device such as, for example, a desktop computer, a laptop computer, a personal digital assistant (PDA), a standard mobile telephone, a tablet personal computer (PC), and/or so forth. The communication device 140 can be used by a user 101 to set up one or multiple social networking accounts such as, for example, a Facebook account, a LinkedIn account, a Google+ account, a Twitter account, a Snapchat account, and Xbox1 account, and/or the like. The user 101 can also use the communication device 140 to communicate and/or exchange information (i.e., data) with a set of other users for personal and professional development purposes.
The hashed environment 105 is associated with (software) containers and includes a container storage 110, container manager 120, and a container directory 130. The hashed environment 105 is associated with storing and managing user data associated with one or multiple users in a (software) container. The container storage 110 can be allocated with a specified amount of storage space (e.g., 200 GB, 500 GB, 1 TB, etc.) and can store user data pertaining to one or more social networking engines or platforms. In some implementations, the data stored in the container storage 110 can be encrypted to prevent unauthorized use. The data stored in the container storage 110 can be associated with user-defined privacy levels such that all the information or data stored in the container storage 110 is stored in a zero-knowledge environment and not shared with other users unless explicitly shared by the user 101. Thus, the data stored in the container storage 110 can facilitate encrypted communications between the communication device 140 associated with the user 101 and the server-side virtual machine processes.
In some implementations, the container manager 120 can implement one or more different hash functions to generate hash value(s) or hash string(s) of the received data from the mobile communication device 140 and stored the hash value(s) or hashed string(s) in the container storage 110. The container manager 120 can automate the deployment of applications inside software containers, by providing an additional layer of abstraction and automation of operating system level virtualization on operating system such as, for example, Linux. In some implementations, an application can include data stored across different containers. In such implementations, the container manager 120 can manage all containers of the application as a single group. In such implementations, the container manager 120 can also cluster the application's containers to optimize resources and provide high-availability.
The container directory 130 can include a list of data associated with the different users that are stored in the container storage 110. The container directory 130 can also partition and list the data associated with different social networking platforms for each individual user. For example, the container directory 130 can delineate the data associated with Facebook for user 101, the data associated with LinkedIn for user 101, the data associated with Snapchat for user 101, and/or the like. The container directory 130 can also store the privacy settings for the data associated with different social networking platforms for each individual user.
As shown in
As shown in
Container 320 can include data associated with user A that can be partitioned into various subsets. For example, data subset A associated with user A's Facebook account information be received from, for the communication device 260 shown in
The controller 328 can be a hardware and/or software module stored in memory and/or executed in a processor of the device that implements container 320. The controller 328 can send and/or receive data units (e.g., data packets) from the mobile communication device associated with user A (e.g., communication device 260 shown in
The controller 328 can automate the deployment of information or data inside container 320 (e.g., by creating different subsets of data related to the different social networking engines described above) by providing an additional layer of abstraction and automation of operating system level virtualization on an operating system such as, for example, Linux. The controller 328 can also store the IP address of the directory server 320 (e.g., ‘Y.G.Z.H’) that can manage the functionality of the different containers 320 and/or 340.
Container 340 can include data associated with user B that can be partitioned into various subsets. For example, data subset P associated with user B's Facebook account information can be received from, for the communication device 270 shown in
The controller 348 can be a hardware and/or software module stored in memory and/or executed in a processor of the device that implements container 340. The controller 348 can send and/or receive data units (e.g., data packets) from the mobile communication device associated with user B (e.g., communication device 270 shown in
In some implementations, interfaces with the containers 320 and 340 may be hierarchically organized so that content undergoes a degree of preliminary processing and organization upon receipt. For example, if the container 320 receives information or data on a first port associated with a first address (e.g., port ‘V’), the received data (or content) may be processed as relating to a specified subject matter, whereas if the container 320 receives information or data on a second port associated with a second address (e.g., port ‘W’), the received data (or content) may be processed as relating to a different subject matter (e.g., affiliation, “friend status”, subject matter or privacy setting).
In some implementations, messages and/or data sent from a first user (e.g., a creator user) to a second user (e.g., a receiver user) can be encrypted by the first user and decrypted by the second user using asymmetric cryptography. Asymmetric cryptography or public-key cryptography is cryptography in which a pair of keys is used to encrypt and decrypt a message so that it arrives to its intended destination securely. Initially, a network user (e.g., the first user) receives a public and private key pair from a certificate authority. Any other user who wants to send an encrypted message can get the intended recipient's (e.g., second user) public key from a public directory. They can use this key to encrypt the message, and they send it to the recipient. When the recipient (e.g., second user) gets the message, they can decrypt it with their private key, which no one else should have access to.
Public-key cryptography, also known as asymmetric cryptography, uses two different but mathematically linked keys, one public and one private. The public key can be shared with everyone, whereas the private key must be kept secret. Rivest-Shamir-Adleman (RSA) is a cryptosystem for public-key encryption, and is widely used for securing sensitive data, particularly when being sent over an insecure network such as the Internet. In RSA cryptography, both the public and the private keys can encrypt a message; the opposite key from the one used to encrypt a message is used to decrypt it. This attribute is one reason why RSA has become the most widely used asymmetric algorithm: It provides a method of assuring the confidentiality, integrity, authenticity and non-reputability of electronic communications and data storage. Many protocols like SSH, OpenPGP, S/MIME, and SSL/TLS rely on RSA for encryption and digital signature functions. It is also used in software programs such as, for example, browsers which need to establish a secure connection over an insecure network like the Internet or validate a digital signature. RSA signature verification is one of the most commonly performed operations in the information technology (IT) sector.
The container may reside on a hosted environment whereby each container is allocated a specified processing commitment. In hosted environments where a controller allocates a processing commitment for a container on a processor (or core on a processor), the processor must first load a container with its one or more applications in the specified state (e.g., saved configuration) from the last period of activation. As the container is activated, the container may await delivery of several messages, such as, for example, those addressed to the IPv6 address for the container. The messages would be encrypted and would need to be decrypted by the container, using, for example, the corresponding symmetric key previously exchanged (or the counterpart asymmetric key). The container loads the applicable key and begins decrypting queued messages.
The contents of the decrypted message may require additional processing. For example, the message may include a request for status information of the container and ask a social networking module within the container to provide an indication of whether a user is available to exchange personal messages. The module then may poll its resources and determine whether the user is in fact available to exchange messages. In launching the query, the container generates an active record requiring a processing follow-up. As the response to the query is received, the active record is updated. When the container cycles through the list of active records requiring subsequent actions, the container generates a responsive message, encrypts the message with the key for the remote recipient, and sends the message to the remote sending container.
In one configuration, where multiple applications and frameworks are being hosted inside a container, the IPv6 packet may be coded with labels and parameters to indicate the constituent application. For example, some applications may only receive a miniscule processing commitment and may be queued for longer cycles, whereas other applications may justify more frequent processing and require the container to process the message within the next cycle.
The received encrypted data 450 can be stored at any suitable located within the container associated with the second user and addressed with unique identifiers, such as an IPv6 address. The application (i.e., Facebook, LinkedIn, Twitter, Microsoft Outlook, Microsoft Word, etc.) running on the container associated with the second user can retrieve the private key 442b and decrypt the encrypted data at the data decryption stage 452 to generate the un-encrypted data 446. The un-encrypted data 446 can then be displayed on the display unit of the user device associated with the second user (visual data) and/or output through a microphone connected to the user device associated with the second user (e.g., audio data).
The key management module 429 can be a hardware and/or software module stored in memory and/or executed in a processor of the device that implements a container. The key management module 429 can implement one or more different hash functions to generate hash value(s) or hash string(s) of data associated with a user that is received from the different ports of the device that implements a container (e.g., container 320 shown in
In some implementations, the key management module 429 can store the different public-private key pairs for different users associated with different containers. For instance, the key implementation module 429 can store the public-private key pairs for a user that is generated by the user device associated with the user and transmitted to the key management module 429 from the key generation module 440 of a user device.
The inspection module 429 can be a hardware and/or software module stored in memory and/or executed in a processor of the device that implements a container. The inspection module 429 can use any suitable number of techniques to inspect and/or analyze the data associated with different social networking engines that are related to different users. The inspection module 429 can output the results of the inspection or the analysis operations to the security module 432.
The security module 432 can be a hardware and/or software module stored in memory and/or executed in a processor of the device that implements a container. The security module 432 can receive data from the inspection module 431 that includes the results of rigorous analysis steps (or operations) performed by the inspection module 431 and can perform further analysis on the received data. In one example, as shown in
The GUI 500 of the container manager 521 displays the parameters of the different service levels provided by the containers managed by the container manager 521. For example, service level ‘A’ (or service category ‘A’) can be associated with 100 processing unit cycles (PUC), a 2 GB main memory space, a bandwidth of 10× and a second tier storage of 1 TB. Service level ‘B’ (or service category ‘B’) can be associated with 10 processing unit cycles (PUC), a 20 MB main memory space, a bandwidth of 2× and a second tier storage of 2 GB. Service level ‘C’ (or service category ‘C’) can be associated with 1 processing unit cycle (PUC), a 10 MB main memory space, a bandwidth of 0.01× and a second tier storage of 1 GB.
The GUI 600 of the social network creation wizard 602 can include data associated with creating (and maintaining) different social network profiles for different users. For example, as seen in
Typically, (social networking) containers may be configured to maintain both public and private interfaces. For example, a virtual machine may maintain an address book of addressing information (or manage another virtual machine that manages addresses and contact information) so that a user can contact other users using existing messaging mechanisms (e.g., private messages, email, text messaging, etc.). The container also may maintain an anonymous messaging address that actively screens all content for personally-identifiable information. In this sense, the public and private virtual interfaces, respectively, may assist a user with maintaining (1) a “real world” interface where other users may contact the user in an identifiable way, (2) a “virtual” interface configured to support anonymous or virtual identity communications.
The container may be configured to port social networking constructs from existing social network engines into newly-formed social networks. For example, a user may interface with a migration system that allows the user to load an existing social network (e.g., Facebook or Twitter) into a new social network. The migrated social network quantum of data may allow the user to preserve a greater degree of privacy and/or security restrictions, preserve legacy data, and/or leverage existing relationships as a micro-social network is being established.
In
The system can receive, from a first communication device associated with a first software container related to a first online user identity, data indicating a request to exchange social network data included in a second software container related to a second online user identity (1102). As described, each of the first software container and the second software container can be an independent server virtualization instance that is configured to operate independently of other processes operating on a same processing resource as the independent server virtualization instance. The request to exchange social network data can comprise at least a first network address that uniquely identifies the first software container and a second network address uniquely identifying the second software container.
For example, the system 300 can receive data indicating a request to exchange social network data from a communication device that is associated with the software container 320 related to the user A. The request can be one to receive social network data included in the software container 340 related to the user B. In some implementations, the data indicating the request can be received by an application instance operating on a communication device associated with the user A, such as an application associated with the system 300, e.g., a social network application for a zero-knowledge social network. Alternatively, the data indicating the request can be received by the controller 328 of the container 320. The data indicating the request can also include information identifying the first and second software containers, where such information may be first and second network addresses that each uniquely identify a single software container. Such network addresses may be, for example, IPv6 or DNS addresses. In some instances, the first and second software containers can exist on users' communication devices. For example, the first software container may be hosted on the first communication device, and the second software container may be hosted on a second communication device. The communication devices may be those of the users to whom the online user identities correspond. For example, user A may have a first online user identity, and the container 320 associated with the first online user identity may belong to the user A. Similarly, user B may have a second user identity, and the container 340 associated with the second online user identity may belong to the user B. Alternatively, the containers 320, 340 may be hosted remotely from the communication devices, e.g., at a cloud service, and in such cases the data indicating the request may be received by the system, e.g., a social network system, from a communication device over one or more networks, and/or may be received by the controller 328 of the container 320 that is hosted in the cloud over one or more networks.
The system can access configuration data that specifies pre-determined relationships between the second software container and one or more other software containers (1104). Each of the pre-determined relationships specified by the configuration data can permit social network data to be exchanged between the second software container and the one or more other software containers. Additionally, each of the pre-determined relationships between the second software container and the one or more other software containers can be specified by a second communication device that is associated with the second software container.
For example, the container 340 relating to the user B can store configuration data locally in the container 340, or configuration data relating to the container 340 can be stored externally to the container 340 in the system 300, for example, such that the configuration data is accessible at the directory server 310 or at another server associated with the system 300. The configuration data may include pre-determined relationships, that is, relationships between the second container 340 and other containers, where a relationship enables information to be exchanged between the containers. In some implementations, the only device that may be able to modify the configuration data associated with the second container 340 may be the communication device that is associated with the container 340, thereby giving the user B exclusive control over the relationships between their container 340 and other containers. Such control allows the user B to completely control how information in their container 340 is shared with other users and entities of the zero-knowledge social network.
In some implementations, the configuration data may include additional information in relation to the pre-determined relationships, such as security levels associated with the pre-determined relationship that govern which social network data may be provided to other containers, thereby giving the user further control over how information in their container is shared within the social network. In some implementations, a pre-determined relationship between two containers may be a publish-and-subscribe relationship, such that a container may be indicated as only publishing information to one or more other containers, only subscribing to information that has been published in one or more other containers, or both publishing and subscribing to information that is in other containers. This provides additional control to a user, in that they may control who sees which information in their container, as well as what information they receive, e.g., from other containers, from advertising entities, and so on.
The system determines that the configuration data specifies a pre-determined relationship between the second software container and the first software container that permits social network data to be exchanged between the second software container and the first software container (1106). For example, the system can inspect the accessed configuration data and determine that a pre-determined relationship between the first and second software containers is specified by the configuration data. The system may further determine that the pre-determined relationship between the first and second software containers permits the social network data included in the second software container to be exchanged with the first software container, that is, such that the social network data in the second software container may be provided to the second software container such that the social network data in the second software container can be presented for output at the first communication device associated with the first software container.
For instance, the controller 348, an application associated with the system 300, or another component of the system 300 may inspect the configuration data associated with the second container 340 that is stored at the second container 340 or elsewhere in the system 300, and may determine that the configuration data specifies a pre-determined relationship between the two software containers 320, 340. The configuration data may further specify that the pre-determined relationship between the two software containers 320, 340 enables the social network data, e.g., the data subset P associated with user B's Facebook social network data 343, to be exchanged with the first software container 320.
Determining that the social network data can be exchanged with the first software container 320 may include determining that the social network data is identified as having been published. For example, the user B can indicate when to publish social network data that is included in their container 340, such that the social network information is only provided to the container 320 if it has been published by the user B. Such a feature ensures that only the social network data that user B wants to share in the social network will be shared, and that other users or entities associated with the social network cannot access this social network data until it has been published. In some implementations, a default setting for the publish-and-subscribe system may be that social network data is automatically published, such that subscribers can access the social network data once it has been added by the user B and stored in the second container 340.
Based on determining that the configuration data specifies a pre-determined relationship between the second software container and the first software container that permits social network data to be exchanged between the second software container and the first software container, the social network data included in the second software container is transmitted to the first software container (1108). For example, based on determining that the configuration data associated with the second software container includes a pre-determined relationship between the second software container and the first software container, and determining that the pre-determined relationship permits the social network data to be transmitted to the first software container, the social network data, e.g., a copy or a pointer to the data, can be transmitted to the first software container. Based on receiving the transmission including the social network data included in the second software container, the first communication device associated with the first software container may provide the received social network data for output at the first communication device.
For example, based on determining that the data set P associated with user B's Facebook social network data 343 that is stored in the container 340 can be exchanged with the container 320, a copy or pointer to the data set P can be transmitted to the container 320. In some implementations, the decision to transmit the social network data to the container 320 can be made by the controller 348 of the container 340, and the transmission of the social network data can be received by the controller 328 of the container 320. In response to receiving the transmission, the system 300, e.g., the controller 328 or an application instance operating on the first communication device associated with the container 320, can also present the received social network data for output at the first communication device. For example, based on receiving social network data corresponding to a social network profile of the second online user identity related to the second container 340, the first communication device associated with the container 320 can provide the social network profile of the second online user identity for output at a display of the first communication device. In some implementations, the system 300 may store the received social network data at the first software container 320. In other implementations, the social network data transmitted from the second software container 340 may be received through the system 300 by an application instance operating on the first communication device, such that the first communication device can present the social network data included in the second container 340 without needing to access the social network data at the first software container 320. In some implementations, the social network data may be provided to the application instance on the first client device for output without the social network data being provided to the first software container. This effectively would allow a user, such as user A, of the first communication device associated with the first software container 320, to view the social network data included in the second software container 340 without such information being transmitted to another software container.
Similar processes may also be used by a communication device to obtain permission to add social network information to a container. For example, a user of the second communication device and having the second online user identity may wish to add information to a social network profile that is stored in the second software container that is related to the second online user identity. To permit the user to add the information to the social network profile, the system can perform a process. Such a process may include receiving, from the second communication device, data indicating a request for the second network address that uniquely identifies the second software container, wherein the request includes social network authorization information corresponding to the second online user identity. The system can then authorize the second communication device to add social network data relating to the second online user identity to the second software container based at least on the social network authorization information corresponding to the second online user identity. Based on authorizing the second communication device to add social network data relating to the second online user identity to the second software container, the system transmits, to the second communication device, information indicating the second network address uniquely identifying the second software container. The system then receives from the second communication device, social network data and information specifying the second network address uniquely identifying the second software container. The social network data received from the second communication device is then stored in the second software container, as the social network data included in the second software container discussed in conjunction with the process 1100, based at least on authorizing the second communication device to add social network data relating to the second online user identity to the second software container and receiving the information specifying the second network address uniquely identifying the second software container. Relying on the system of
In some implementations, the system may utilize a publish-and-subscribe system to exchange information between software containers. In such a case, the process 1100 of
Additionally, in some implementations, each of the first software container and the second software container is associated with controls that permit access to data stored at the software container according to privacy rules. Such controls may enable a social network or other service maintaining such software containers to comply with domestic, local, or international privacy regulations.
Additionally, in some implementations, the second software container includes social network data relating to two or more different social networks. Thus, as shown in
As discussed, in implementations of the zero-knowledge system discussed, the data indicating the request to exchange the social network data is received from a social network application instance operating on the first communication device, wherein the social network application instance is associated with the social network engine. Such social network applications, as shown hosted on the devices 260, 270 of
As discussed previously with respect to the network addresses that uniquely identify the software containers of the process 1100, the first network address uniquely identifying the first software container may be a first IPv6 or DNS address that points to the first software container and that does not point to any additional software containers, and the second network address uniquely identifying the second software container may be a second IPv6 or DNS address that points to the second software container and that does not point to any additional software containers.
Additionally, to provide added security in the exchange of information between containers in the system, transmitting the social network data included in the second software container to the first software container may comprise encrypting the social network data before transmission and decrypting the encrypted social network data upon receipt. For example, the transmission process may include encrypting the social network data using a public encryption key that is included in the second software container, transmitting the encrypted social network data to the first software container, and decrypting the encrypted social network data using a private encryption key that is included in the first software container.
Moreover, to provide for added control of the user over the information included in their container and how that information is shared, the configuration data discussed with respect to the process 1100 may be included in the second software container.
The containers described in
In some implementations, a container may be configured to include advertising. However, the advertising service may be configured to operate without any information for a prospective candidate thus conforming to act in a zero-knowledge environment. In such implementations, the use of modular containers may be used to reduce and/or eliminate the need for complex application framework that publishes content between users. This, in turn, may facilitate scaling to large audiences. The containers may be configured to interoperate between multiple services. Hence, the same container may be configured to operate both in micropublishing environments (e.g., Twitter) and in more computationally complex environments (e.g., Facebook).
In another configuration, the container may be used to generate its own profile and/or tag and share that tag with an advertising server, which can then provide an advertisement responsive to the shared tag. In still another configuration, an advertising engine within the container periodically downloads a collection of information describing various advertisements and identifies an advertisement identified by the advertising engine. Alternatively, the advertising engine may inspect suggested advertisements from an advertising server and find an advertisement responsive to the perceived interests of the user. If a tag is shared, the tag may specify interests or key words responsive to the user's interests. Still, other tags may include some descriptive personal information that is supported by the user's specified permission level and/or has been authorized for release by the user.
Implementations of the subject matter and the functional operations described in this specification can be implemented in digital electronic circuitry, in tangibly-embodied computer software or firmware, in computer hardware, including the structures disclosed in this specification and their structural equivalents, or in combinations of one or more of them. Implementations of the subject matter described in this specification can be implemented as one or more computer programs, i.e., one or more modules of computer program instructions encoded on a tangible non-transitory program carrier for execution by, or to control the operation of, data processing apparatus. Alternatively or in addition, the program instructions can be encoded on an artificially-generated propagated signal, e.g., a machine-generated electrical, optical, or electromagnetic signal that is generated to encode information for transmission to suitable receiver apparatus for execution by a data processing apparatus. The computer storage medium can be a machine-readable storage device, a machine-readable storage substrate, a random or serial access memory device, or a combination of one or more of them.
The term “data processing apparatus” refers to data processing hardware and encompasses all kinds of apparatus, devices, and machines for processing data, including by way of example a programmable processor, a computer, or multiple processors or computers. The apparatus can also be or further include special purpose logic circuitry, e.g., a central processing unit (CPU), a FPGA (field programmable gate array), or an ASIC (application-specific integrated circuit). In some implementations, the data processing apparatus and/or special purpose logic circuitry may be hardware-based and/or software-based. The apparatus can optionally include code that creates an execution environment for computer programs, e.g., code that constitutes processor firmware, a protocol stack, a database management system, an operating system, or a combination of one or more of them. The present disclosure contemplates the use of data processing apparatuses with or without conventional operating systems, for example Linux, UNIX, Windows, Mac OS, Android, iOS or any other suitable conventional operating system.
A computer program, which may also be referred to or described as a program, software, a software application, a module, a software module, a script, or code, can be written in any form of programming language, including compiled or interpreted languages, or declarative or procedural languages, and it can be deployed in any form, including as a stand-alone program or as a module, component, subroutine, or other unit suitable for use in a computing environment. A computer program may, but need not, correspond to a file in a file system. A program can be stored in a portion of a file that holds other programs or data, e.g., one or more scripts stored in a markup language document, in a single file dedicated to the program in question, or in multiple coordinated files, e.g., files that store one or more modules, sub-programs, or portions of code. A computer program can be deployed to be executed on one computer or on multiple computers that are located at one site or distributed across multiple sites and interconnected by a communication network. While portions of the programs illustrated in the various figures are shown as individual modules that implement the various features and functionality through various objects, methods, or other processes, the programs may instead include a number of sub-modules, third party services, components, libraries, and such, as appropriate. Conversely, the features and functionality of various components can be combined into single components as appropriate.
The processes and logic flows described in this specification can be performed by one or more programmable computers executing one or more computer programs to perform functions by operating on input data and generating output. The processes and logic flows can also be performed by, and apparatus can also be implemented as, special purpose logic circuitry, e.g., a central processing unit (CPU), a FPGA (field programmable gate array), or an ASIC (application-specific integrated circuit).
Computers suitable for the execution of a computer program include, by way of example, can be based on general or special purpose microprocessors or both, or any other kind of central processing unit. Generally, a central processing unit will receive instructions and data from a read-only memory or a random access memory or both. The essential elements of a computer are a central processing unit for performing or executing instructions and one or more memory devices for storing instructions and data. Generally, a computer will also include, or be operatively coupled to receive data from or transfer data to, or both, one or more mass storage devices for storing data, e.g., magnetic, magneto-optical disks, or optical disks. However, a computer need not have such devices. Moreover, a computer can be embedded in another device, e.g., a mobile telephone, a personal digital assistant (PDA), a mobile audio or video player, a game console, a Global Positioning System (GPS) receiver, or a portable storage device, e.g., a universal serial bus (USB) flash drive, to name just a few.
Computer-readable media (transitory or non-transitory, as appropriate) suitable for storing computer program instructions and data include all forms of non-volatile memory, media and memory devices, including by way of example semiconductor memory devices, e.g., EPROM, EEPROM, and flash memory devices; magnetic disks, e.g., internal hard disks or removable disks; magneto-optical disks; and CD-ROM and DVD-ROM disks. The memory may store various objects or data, including caches, classes, frameworks, applications, backup data, jobs, web pages, web page templates, database tables, repositories storing business and/or dynamic information, and any other appropriate information including any parameters, variables, algorithms, instructions, rules, constraints, or references thereto. Additionally, the memory may include any other appropriate data, such as logs, policies, security or access data, reporting files, as well as others. The processor and the memory can be supplemented by, or incorporated in, special purpose logic circuitry.
To provide for interaction with a user, implementations of the subject matter described in this specification can be implemented on a computer having a display device, e.g., a CRT (cathode ray tube), LCD (liquid crystal display), or plasma monitor, for displaying information to the user and a keyboard and a pointing device, e.g., a mouse or a trackball, by which the user can provide input to the computer. Other kinds of devices can be used to provide for interaction with a user as well; for example, feedback provided to the user can be any form of sensory feedback, e.g., visual feedback, auditory feedback, or tactile feedback; and input from the user can be received in any form, including acoustic, speech, or tactile input. In addition, a computer can interact with a user by sending documents to and receiving documents from a device that is used by the user; for example, by sending web pages to a web browser on a user's client device in response to requests received from the web browser.
The term “graphical user interface,” or GUI, may be used in the singular or the plural to describe one or more graphical user interfaces and each of the displays of a particular graphical user interface. Therefore, a GUI may represent any graphical user interface, including but not limited to, a web browser, a touch screen, or a command line interface (CLI) that processes information and efficiently presents the information results to the user. In general, a GUI may include a plurality of user interface (UI) elements, some or all associated with a web browser, such as interactive fields, pull-down lists, and buttons operable by the business suite user. These and other UI elements may be related to or represent the functions of the web browser.
Implementations of the subject matter described in this specification can be implemented in a computing system that includes a back-end component, e.g., as a data server, or that includes a middleware component, e.g., an application server, or that includes a front-end component, e.g., a client computer having a graphical user interface or a Web browser through which a user can interact with an implementation of the subject matter described in this specification, or any combination of one or more such back-end, middleware, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication, e.g., a communication network. Examples of communication networks include a local area network (LAN), a wide area network (WAN), e.g., the Internet, and a wireless local area network (WLAN).
Other implementations are within the scope of the following claims. For example, the same architecture can be used with or without security. If implemented with security, it allows ad hoc groups to be formed for confidentially sharing information and managing activity. This may be used for environments where confidentiality is required (e.g., a clean room being used to manage a pre-acquistion diligence) and national security teams (e.g., a tactical messaging infrastructure for deployed soldiers or strategic intelligence sharing).
The computing system can include clients and servers. A client and server are generally remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other.
While this specification contains many specific implementation details, these should not be construed as limitations on the scope of any invention or on the scope of what may be claimed, but rather as descriptions of features that may be specific to particular implementations of particular inventions. Certain features that are described in this specification in the context of separate implementations can also be implemented in combination in a single implementation. Conversely, various features that are described in the context of a single implementation can also be implemented in multiple implementations separately or in any suitable sub-combination. Moreover, although features may be described above as acting in certain combinations and even initially claimed as such, one or more features from a claimed combination can in some cases be excised from the combination, and the claimed combination may be directed to a sub-combination or variation of a sub-combination.
Similarly, while operations are depicted in the drawings in a particular order, this should not be understood as requiring that such operations be performed in the particular order shown or in sequential order, or that all illustrated operations be performed, to achieve desirable results. In certain circumstances, multitasking and parallel processing may be advantageous. Moreover, the separation of various system modules and components in the implementations described above should not be understood as requiring such separation in all implementations, and it should be understood that the described program components and systems can generally be integrated together in a single software product or packaged into multiple software products.
Particular implementations of the subject matter have been described. Other implementations, alterations, and permutations of the described implementations are within the scope of the following claims as will be apparent to those skilled in the art. For example, the actions recited in the claims can be performed in a different order and still achieve desirable results.
Accordingly, the above description of example implementations does not define or constrain this disclosure. Other changes, substitutions, and alterations are also possible without departing from the spirit and scope of this disclosure.
This application is a continuation of U.S. application Ser. No. 14/824,828, filed Aug. 12, 2015, which claims the benefit of U.S. Provisional Application No. 62/154,515, filed Apr. 29, 2015 and U.S. Provisional Application No. 62/036,267, filed Aug. 12, 2014, each of which are incorporated herein by reference.
| Number | Name | Date | Kind |
|---|---|---|---|
| 5995943 | Bull et al. | Nov 1999 | A |
| 6338039 | Lonski et al. | Jan 2002 | B1 |
| 6463417 | Schoenberg | Oct 2002 | B1 |
| 6845448 | Chaganti et al. | Jan 2005 | B1 |
| 6988075 | Hacker | Jan 2006 | B1 |
| 7466235 | Kolb et al. | Dec 2008 | B1 |
| 7617114 | Tooke, III | Nov 2009 | B1 |
| 8600776 | Raduchel | Dec 2013 | B2 |
| 8955102 | Harding | Feb 2015 | B1 |
| 10078728 | Raduchel | Sep 2018 | B2 |
| 10231077 | Raduchel | Mar 2019 | B2 |
| 20020010679 | Felsher | Jan 2002 | A1 |
| 20020013517 | West et al. | Jan 2002 | A1 |
| 20020016821 | Son et al. | Feb 2002 | A1 |
| 20020042725 | Mayaud | Apr 2002 | A1 |
| 20020042884 | Wu et al. | Apr 2002 | A1 |
| 20030074248 | Braud et al. | Apr 2003 | A1 |
| 20030140044 | Mok et al. | Jul 2003 | A1 |
| 20030191669 | Fitzgerald | Oct 2003 | A1 |
| 20030195774 | Abbo | Oct 2003 | A1 |
| 20030233342 | Vadrot | Dec 2003 | A1 |
| 20040148194 | Wellons | Jul 2004 | A1 |
| 20040260577 | Dahlin et al. | Dec 2004 | A1 |
| 20060106836 | Masugi et al. | May 2006 | A1 |
| 20070027721 | Hasan et al. | Feb 2007 | A1 |
| 20070061170 | Lorsch | Mar 2007 | A1 |
| 20070078677 | Hofstetter | Apr 2007 | A1 |
| 20070138253 | Libin et al. | Jun 2007 | A1 |
| 20080009344 | Graham et al. | Jan 2008 | A1 |
| 20080109651 | Duda et al. | May 2008 | A1 |
| 20080177569 | Chen et al. | Jul 2008 | A1 |
| 20090012817 | Squires et al. | Jan 2009 | A1 |
| 20090037224 | Raduchel | Feb 2009 | A1 |
| 20090044259 | Bookman et al. | Feb 2009 | A1 |
| 20110085667 | Berrios | Apr 2011 | A1 |
| 20110161172 | Lee | Jun 2011 | A1 |
| 20110208559 | Fontoura | Aug 2011 | A1 |
| 20110258441 | Ashok | Oct 2011 | A1 |
| 20120042000 | Heins et al. | Feb 2012 | A1 |
| 20120078660 | Mangicaro et al. | Mar 2012 | A1 |
| 20120089678 | Cort | Apr 2012 | A1 |
| 20120123798 | Lanzalotti | May 2012 | A1 |
| 20130018855 | Eshghi | Jan 2013 | A1 |
| 20130205022 | Kagan et al. | Aug 2013 | A1 |
| 20130268284 | Heck | Oct 2013 | A1 |
| 20130346518 | Soundararajan | Dec 2013 | A1 |
| 20140081669 | Raduchel | Mar 2014 | A1 |
| 20140095286 | Drewry et al. | Apr 2014 | A1 |
| 20140095319 | Bruns et al. | Apr 2014 | A1 |
| 20140310063 | Freeman | Oct 2014 | A1 |
| 20140372748 | Dixon | Dec 2014 | A1 |
| 20150142986 | Reznik | May 2015 | A1 |
| 20160063215 | Zamer | Mar 2016 | A1 |
| 20160292370 | Saric | Oct 2016 | A1 |
| 20170032092 | Mink | Feb 2017 | A1 |
| 20170161439 | Raduchel | Jun 2017 | A1 |
| 20180039737 | Dempers | Feb 2018 | A1 |
| 20190027234 | Raduchel | Jan 2019 | A1 |
| 20190208354 | Raduchel | Jul 2019 | A1 |
| 20190253523 | Raduchel | Aug 2019 | A1 |
| 20190287663 | Raduchel | Sep 2019 | A1 |
| Number | Date | Country |
|---|---|---|
| 1650305 | Aug 2005 | CN |
| 102231708 | Nov 2011 | CN |
| 103140870 | Jun 2013 | CN |
| 103259735 | Aug 2013 | CN |
| Entry |
|---|
| Neng-Wen Wang, Yueh-Min Huang, “A novel software key container in on-line media services,” Computers & Electrical Engineering, vol. 35, Issue 2, 2009, p. 370-375 (Year: 2009). |
| O. Batz, C. Kleiner and A. Koschel, “P2P applied in CMS for advertising,” 2009 Fourth International Conference on Digital Information Management, Ann Arbor, MI, 2009, pp. 1-8. (Year: 2009). |
| Baig, Edward C., “Amazon exec: Alexa should be able to talk to Siri,” USA Today, Jun. 7, 2017, URL<https://www.usatoday.com/story/tech/columnist/baig/2017/06/07/amazons-exec-alexa-should-able-talk-siri/102594930/>. |
| Office Action issue in U.S. Appl. No. 14/824,828 dated Dec. 3, 2015, 21 pages. |
| Turnbill, James, “The Docker Book”, Aug. 4, 104, The Docker Book v1.0.7 (8f1618c), p. 1-280. |
| International Search Report and Written Opinion in International Application No. PCT/US2015/044887, dated Mar. 3, 2016, 16 pages. |
| Office Action issued in U.S. Appl. No. 14/824,828 dated Jun. 9, 2016, 24 pages. |
| Lujo Bauer, Cristian Bravo-Lillo, Elli Fragkaki, and William Melicher. 2013. A Comparison of users' perceptions of and willingness to use Google, Facebook, and Google+ single-sign-on functionality. In Proceedings of the 2013 ACM workshop on Digital identity management *DIM '13). ACM, New York, NY, USA 25-36. |
| M.J. Scheepers, “Virtualization and Containerization of Application Infrastructure: A Comparison,” 2014, University of Twente. |
| U. Feige, A. Fiat and A. Shamir, “Zero-knowledge proofs of identity”, J. Cryptology, vol. 1, pp. 77-94, 1988. |
| European Extended Search Report in European Application No. 15831680.2, dated Mar. 5, 2018, 6 pages. |
| CN Office Action in Chinese Application No. 200880022802.5, dated May 24, 2011, 9 pages (with English translation. |
| CN Office Action issued in CN201210112416.3 dated Sep. 22, 2014, with English Translation, 20 pages. |
| Indian Office Action in Indian Application No. 8383/DELNP/2009, dated Jun. 22, 2018, 8 pages. |
| Kemoni, “The Impact of Records Centres on the Management of Public Sector Records in Kenya,” dated Apr. 1998, 13 pages. |
| PCT International Preliminary Report on Patentability in International Application No. PCT/US2015/056961, dated Apr. 25, 2017, 11 pages. |
| PCT International Search Report and Written Opinion in International Application No. PCT/US2018/018507, dated Mar. 12, 2018, 12 pages. |
| PCT International Search Report and Written Opinion in International Application No. PCT/US2015/056961, dated Jan. 11, 2016, 12 pages. |
| PCT Notification Concerning Transmittal of International Preliminary Report on Patentability for Application No. PCT/US2008/069228 dated Jan. 5, 2010, 11 pages. |
| PCT Notification Concerning Transmittal of International Preliminary Report on Patentability for Application No. PCT/US2018/018507, dated Aug. 29, 2019, 10 pages. |
| PCT Notification of Transmittal of the International Search Report and the Written Opinion for Application No. PCT/US08/69228 dated Sep. 10, 2008, 15 pages. |
| Roseberry, “Can Any Bluetooth Enabled Cell Phone Be Used as a Modem?,” Jul. 2006, Retrieved from URL: <mobileoffice.about.com/od/usingyourphone/f/bluetoothphones.htm>. |
| U.S Non-Final Office Action for U.S. Appl. No. 14/523,110, dated Jul. 8, 2016, 14 pages. |
| U.S. Final Office Action for U.S. Appl. No. 12/167,746 dated May 5, 2011, 10 pages. |
| U.S. Final Office Action for U.S. Appl. No. 14/083,691 dated Mar. 30, 2015, 12 pages. |
| U.S. Final Office action for U.S. Appl. No. 14/083,691 dated Mar. 24, 2016, 16 pages. |
| U.S. Non-Final Office Action for U.S. Appl. No. 12/167,746 dated Oct. 12, 2010, 12 pages. |
| U.S. Non-Final Office Action for U.S. Appl. No. 14/083,691 dated Mar. 27, 2014, 13 pages. |
| U.S. Non-Final Office Action for U.S. Appl. No. 14/083,691 dated Jul. 17, 2015, 10 pages. |
| U.S. Non-Final Office Action for U.S. Appl. No. 14/083,691 dated Oct. 23, 2014, 16 pages. |
| U.S. Non-Final Office Action for U.S. Appl. No. 15/435,150, dated Feb. 26, 2018, 18 pages. |
| U.S. Non-Final Office Action for U.S. Appl. No. 16/432,382, dated Jul. 8, 2019, 27 pages. |
| U.S. Notice of Allowance for U.S. Appl. No. 12/167,746 dated Jul. 29, 2013, 13 pages. |
| U.S. Notice of Allowance for U.S. Appl. No. 14/083,691, dated Jun. 17, 2016, 11 pages. |
| Zhao et al., “Study on Virtualization Technology of Programmable Routers” J. Chongqing Post and Telecomm,. Uni., Feb. 28, 2013, 20-3 and 29. |
| CN Office Action in Chinese Application No. 201580042948.6, dated Apr. 16, 2020, 11 pages (with English Translation). |
| Number | Date | Country | |
|---|---|---|---|
| 20170331630 A1 | Nov 2017 | US |
| Number | Date | Country | |
|---|---|---|---|
| 62154515 | Apr 2015 | US | |
| 62036267 | Aug 2014 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 14824828 | Aug 2015 | US |
| Child | 15607924 | US |
