Abstract

A method for operating customized information services via a network comprising transmitting the identity U of an end-user station via the network to a name translator station. At the name translator station, the identity U of the end-user station is translated into a pseudonym U'. The pseudonym U' is transmitted from the name translator station via the network to a filter station. The pseudonym U' is transmitted from the filter station via the network to a service provider station. In response, the service provider station transmits to the filter station an encrypted information description describing information available from the service provider station. At the filter station, the encrypted information description is compared with an encrypted information profile of the end-user station to identify specific information to be transmitted from the service provider station to the end-user station. An indicator is then transmitted from the filter station to the service provider station indicating the specific information to be transmitted to the end-user station. The specific information is then transmitted via the name translator station to the end-user station in an encrypted form not accessible to the name translator station. The specific information is decrypted at the end-user station. This technique protects end-user privacy by insuring that no logical entity is aware of the end-user identity and also aware of the end-user profile and content of the information the end-user receives.

Other References

• "Kerberos: An Authentication system for Open System Networks," J. G. Steiner et al., Usenix Conference Proc., Winter 1988, pp. 191-20