US 12,407,733 B2
Automated framework for monitoring opt-out settings
Kang G. Shin, Ann Arbor, MI (US); and Hoang Duc Bui, Ann Arbor, MI (US)
Assigned to The Regents of The University of Michigan, Ann Arbor, MI (US)
Filed by THE REGENTS OF THE UNIVERSITY OF MICHIGAN, Ann Arbor, MI (US)
Filed on Oct. 12, 2023, as Appl. No. 18/379,282.
Claims priority of provisional application 63/415,813, filed on Oct. 13, 2022.
Prior Publication US 2024/0137389 A1, Apr. 25, 2024
Int. Cl. H04L 9/40 (2022.01); G06F 40/205 (2020.01); H04L 67/50 (2022.01)
CPC H04L 63/20 (2013.01) [G06F 40/205 (2020.01); H04L 67/535 (2022.05)] 18 Claims
OG exemplary drawing
 
1. A computer-implemented method for detecting non-compliance with an opt-out decision of a user, comprising:
detecting, by a policy extractor, a user interface element on a webpage associate with a given online tracking entity, where the user interface element enables a user to opt-out of having data collected by the given online tracking entity;
performing, by a data flow analyzer, opt-out for a given user using the detected user interface element;
identifying, by the policy extractor, select statements of a privacy policy for the given online tracking entity by analyzing webpages associated with the given online tracking entity, where the select statements specify data practices in response to an opt-out decision;
detecting, by a data flow analyzer, transfer of one or more cookies from a web browser operated by the given user to a server, where the one or more cookies are transferred after the opt-out and the server is associated with the given online tracking entity;
analyzing, by a consistency analyzer, content of the one or more detected cookies in relation to the select statements of the privacy policy; and
notifying, by the consistency analyzer, the given user of a violation of the privacy policy in response to determining an inconsistency between the content of the one or more detected cookies and the select statements of the privacy policy, where the policy extractor, the data flow analyzer and the consistency analyzer are implemented by computer executable instructions executed by a computer processor.