Monitoring of individual internet usage

[0002] This application is related to application Ser. No. 09/265,512 filed Mar. 9, 1999 entitled “Network Data Distribution Based Upon User-Specific Qualities,” which is incorporated herein by reference, and which is a continuation-in-part of Application Ser. No. 60/077,331 filed Mar. 9, 1998 entitled “Network Data Distribution Based Upon Geographic Location, Usage Patterns, Interactive Data, Profile Data, Demographic Data and Scheduling Information.”

[0003] This application is also related to application Ser. No. 09/349,325 filed Jul. 8, 1999 entitled “Monitoring of Individual Internet Usage.”

[0004] 1. Field of the Invention

[0005] The present invention relates to monitoring the activity of a user of a data network, such as the Internet.

[0006] 2. Description Of Related Art

[0007] Online services today offer a variety of services to their users. Users may access news, weather, financial, sports, and entertainment services, participate in and retrieve information from online discussion groups, and send and receive email. A user of an online service typically accesses the service using specialized communication software (i.e., client application or client software) that establishes and manages a connection from the user's computer (or client) to the service provider's host computers (or servers) and facilitates the user's interactions with the service.

[0008] In addition to managing the connection, there is provided software to display pages or screens relating to retrieved content according to views or presentations specific to the online service. This software may be integrated with the client application. The functionality of the content and the user interface (i.e., icons, dialog boxes, menus, etc.) for interacting with the content are typically dictated by various standards.

[0009] Interactions between the user's computer and the service are facilitated by a variety of software protocols (i.e., communication conventions, rules and structures), including application level protocols, for managing the transfer of data across the network and to the client application on the user's computer. A protocol may be proprietary or exclusive to a service such that only client software from the service provider may be used to communicate with the server software. For example, an online service that supports electronic mail, discussion groups, chat groups, news services, etc. may define and use specific protocols for each type of service so that appropriate information is exchanged between the participants (i.e., clients and servers). Each application-specific protocol may be based on a common, underlying protocol.

[0010] The Internet and World Wide Web (“Web”), comprised of a vast array of international computer networks, provide online service users with considerable information resources and other content. Typically, this content is accessed using a web browser, such as Microsoft Internet Explorer or Netscape Navigator, capable of understanding the HyperText Markup Language (HTML) used to create the documents found on the Web and the HyperText Transfer Protocol (HTTP) used to navigate the Web. Email and Usenet discussion groups are typically accessed through companion software to the browser. Although web browsers typically have varying levels of functionality or sophistication, retrieved content is displayed in content pages according to views or presentations specific to the web document currently presented by the web browser. Typically, the views and presentations are different than those provided by the communication software from the online service because the web browser is, in fact, a separate client application displaying web documents containing presentation directives.

[0011] When using a browser, the browser issues HTTP messages to request web pages. A requested web page is typically identified using its URL—uniform resource locator. The URL is a reference (or address) to a resource available on a TCP/IP network such as the Internet. A URL is composed of a character string, and may have a number of parts. These parts include a top level domain name, second level domain name, directory name, and file name. URLs may identify a file located on a web server. URLs may also point to other resources on the network such as database queries and command output. The determination and use of URLs is well known in the art and is not discussed further herein.

[0012] In some portions of this disclosure, the term “resource locator” is used. The term is defined as a string or code which uniquely identifies a resource on a network. Thus, the URL is a species of resource locator.

[0013] There are a number of ways that a user can connect to the Internet. First, a user can subscribe to a proprietary on-line network, such as, for example, America Online. Second, a user can subscribe to an Internet Service Provider (ISP). In any case, users typically connect to the Internet using a computer with a communications device such as an analog modem, an Ethernet adapter, DSL adapter or cable modem. Such connections may be analog or digital, dial-up or constantly-connected. Subscribers typically pay a fee for their subscriptions to proprietary non-line networks and ISPs. These fees typically are in the form of a sign-up fee, plus on-line charges which are fixed (i.e., unlimited monthly access for a fixed fee) or based upon the amount of time the user is connected. The fees generally increase with bandwidth.

[0014] On-line and Internet content and service providers often derive revenue by displaying advertisements to users. For example, when a user accesses a web page on the Web, an advertisement may be displayed to the user as part of the web page. Advertisements are also shown to users of some proprietary on-line services. Often in such systems, each user accessing a certain screen or site is shown the same advertisement. Sophisticated systems have the capability to change the advertisement after a certain period of time.

[0015] Advertisers find it desirable to target advertisements to relevant potential customers. For example, an advertiser of stockings would prefer to target women rather than men with its advertising. A Boston restaurant would prefer to target residents of Boston and business travelers rather than children living in San Francisco. Moreover, advertisers prefer to pay for advertising based upon the number of relevant consumers who are actually exposed to the advertisement. For typical on-line systems and networks, including the Web, it is often difficult for an advertiser to precisely determine whether its advertisements were actually viewed by a user and for how long, and whether the advertisement induced a response. Accordingly, there exists a need for a targeted advertisement system that also can provide information as to the characteristics of those who were exposed to each advertisement, for how long the user was exposed, and at what times.

[0016] In accordance with the present invention, the on-line activities of an on-line user are monitored and stored. Information regarding the user's activities are used as a basis for targeting advertisements to the user. Monitoring is performed by a client monitoring application, which performs monitoring without intruding on the user's activities.

[0017] According to one aspect of the invention, URLs in the address bar of the browser application are obtained by the client monitoring application. According to a second aspect of the invention, the stream of URLs transmitted by the browser application are obtained by the client monitoring application. According to a third aspect of the invention, information in displayed web pages is obtained by the client monitoring application.

[0018] Still further objects and advantages attaching to the system and to its use and operation will be apparent to those skilled in the art from the following particular description.

[0019] Further objects of this invention, together with additional features contributing thereto and advantages accruing therefrom, will be apparent from the following description of a preferred embodiment of the present invention which is shown in the accompanying drawings with like reference numerals indicating corresponding parts throughout and which is to be read in conjunction with the following drawings, wherein:

[0020] FIG. 1 is a first block diagram of a network data distribution system in accordance with the invention,

[0021] FIG. 2 is a screen shot of a window displayed by a browser application.

[0022] FIG. 3 is a second block diagram of a network data distribution system in accordance with the present invention.

[0023] FIG. 4 is a flow chart of a method of distributing data in a network in accordance with the invention.

[0024] FIG. 5 is a flow chart of a method of monitoring web browsing by a user in accordance with the invention.

[0025] FIG. 6 is a screen shot of a second window displayed by a browser application.

[0026] FIG. 7 is a screen shot of a third window displayed by a browser application.

[0027] FIGS. 8A, 8B and 8C are flow charts of several techniques for obtaining information about a requested web page in accordance with the invention.

[0028] These and additional embodiments of the invention may now be better understood by tuning to the following derailed description wherein an illustrated embodiment is described.

[0029] Throughout this description, the preferred embodiment and examples shown should be considered as exemplars, rather than limitations on the apparatus and methods of the present invention.

[0030] The System of the Invention

[0031] The system of the invention enables data to be sent to individuals based upon: the individual's geographic location; the individual's interactive data; the individual's network usage data; the individual's personal profile information; the scheduling requirements of the data to be sent; and the demographic requirements of the data to be sent.

[0032] Referring now to FIG. 1, there is shown a block diagram of a network data distribution system in accordance with the invention in conjunction with a source of web pages. FIG. 1 includes a local device 100, a data access network 120, a monitoring server 130 and a web server 150. The local device 100, the data access network 120 and the monitoring server 130 comprise the network data distribution system.

[0033] The local device 100 preferably comprises a client computer which is configured to access the monitoring server 130 via the local access network 120. The client computer may be, for example, a PC running a Microsoft Windows operating system. The local device 100 preferably includes an output device, such as display 101, and an input device, such as keyboard 102 and / or pointing device 103 (e.g., mouse, track ball, light pen, or data glove). The local device 100 may also be, for example, an Internet appliance, network computer (NC), or an appropriately Internet-enabled device such as a portable digital assistant (PDA), mobile phone, refrigerator, etc. The particular type of device of the local device 100 is not considered to be important so long as the local device 100 can provide some measure of individual user interactivity with an online service.

[0034] The data access network 120 provides lower layer network support for the local device 100 to interact with the monitoring server 130 and the web server 150. The data access network 120 preferably comprises a common or private bi-directional telecommunications network (e.g., a public switched telephone network (PSTN), a cable-based telecommunication network, a LAN, a WAN, a wireless network), coupled with or overlayed by a TCP/IP network (e.g., the Internet or an intranet).

[0035] The web server 150 may be of the type known in the art and has the ability to serve web pages to the local device 100, as requested in the manner known in the art. It should be appreciated that the web server 150 is generic for any source of web pages available to the local device 100. Thus, for example, the web server 150 could be accessible from the Internet, or it could be a part of an intranet and represents any number of web servers.

[0036] The monitoring server 130 preferably is a computer system, such as a server computer. The monitoring server 130 acts as a recipient of certain information transmitted by the local device 100, as described further below. The monitoring server 130 preferably also transmits certain data to the local device 100 as described further below.

[0037] A browser application, such as Microsoft Internet Explorer or Netscape Navigator is preferably installed on the local device 100. A “browser application” is software which provides interactive utilization of hypertext objects located on a network, such as web pages on the Internet. When the local device 100 is connected to the web server 150 through the data access network 120, the user of the local device browses the web server 150 from the local device 100 using the browser application. The browser application itself need not be stored on the local device 100. The important aspect is that the user, from the local device 100, can exercise control over what web pages are requested and thus displayed by the local device 100.

[0038] Referring now to FIG. 2, there is shown a window 400 generated by a browser application, here Microsoft Internet Explorer. The browser window 400 is familiar to those skilled in the art, so the particulars are not described further herein. Further information regarding the use of most browser applications and their technical specifications is abundantly available.

[0039] Several aspects of the browser window 400 are identified for further reference below. These aspects include a display pane 410, an address bar 420 and a title bar 430. The display pane 410 is a region of the browser window 400 wherein the browser application causes web pages received by the browser application to be displayed. The address bar 420 is another region of the browser window 400 and the browser application displays URLs in the address bar 420 corresponding to the web page currently displayed in the display pane 410. The user can also enter a URL into the address bar 420, and the browser application will attempt to load the web page or other object to which the entered URL points. The primary feature of the title bar 430 is that it displays the title of the browser application. Another feature of most browsers is that the title bar 430 displays the title of the web page then displayed in the display pane 410.

[0040] Some browser applications permit the address bar to be hidden. However, even if the address bar is hidden, the browser application will copy the URL of a requested web page into an object corresponding to the displayed address bar. For this reason, references herein to the term “address bar” refers either the address bar display 420 or the address bar object, depending on the context. One of skill in the art will appreciate the proper meaning of the term depending on its context. However, in general, the address bar display is indicated with its reference number, 420.

[0041] Referring now to FIG. 3, there is shown a block diagram of a network data distribution system in accordance with the present invention. The system comprises a client monitoring application 110, the data access network 120, the monitoring server 130 and data stores 140a-g(collectively, 140). A browser application 160 is also shown. The client monitoring application 110 is a program operative on local device 100, and preferably an independent application program or a DLL. The client monitoring application 110 preferably retrieves certain network data, displays certain network data, transmits geographic location data, transmits interactive user data, transmits network usage data and transmits personal profile information as described below. The client monitoring application 110 is preferably a fully-featured client application which also sets up and maintains the connection to the data access network 120. The data stores 140 store and provide this geographic information data 140d, network usage data 140a, interactive usage data 140b, personal profile information 140g, data to be sent 140e, schedule for transmitting data 140fand demographics for transmitting data 140c.

[0042] Each time an individual uses the local device 100 to connect to the data access network 120, the client monitoring application 110 and the monitoring server establish a session. In this session, the client monitoring application 110 transmits certain information regarding the user of the local device 100 and his use of the local device 100 while connected to the data access network 120. The monitoring server 130, on the other hand, uses the information from the client monitoring application 100 to determine information which should be sent to the client monitoring application 110. Preferably, the information from the client monitoring application 110 is used by the monitoring server 130 to select advertisements to the local device 100. The client monitoring application then causes these advertisements to be displayed on the local device's output device 101.

[0043] The information from the client monitoring application 110 regarding the user preferably includes geographic data and personal profile information. Geographic data indicating the user's current location preferably is sent from the client monitoring application 110 to the monitoring server 130, which then stores the geographic data in the data store 140d. This geographic data can be something simple, like a phone number. The user preferably provides personal profile information on a periodic basis which is stored in the data store 140gand used by the monitoring server 130. This information consists of (but is not limited to) things such as: age, sex, marriage status, home address and personal interests.

[0044] The information regarding the user's use of the local device 100 includes email and web usage and advertisement click-throughs. The user's interactions and feedback with the web server 150 provided through the browser application 160 are preferably captured by the client monitoring application 110, analyzed by the monitoring server 130 and stored in the data store 140b. This includes the user's feedback and responses to the data delivered to the browser application 160. The user's activities on the web server 150 provided through the browser application 160 are preferably captured by the client monitoring application 110, analyzed by the monitoring server 130 and stored in the data store 140a. This includes the type of network data the user requests and accesses. This data is preferably summarized and classified into multiple demographic profiles.

[0045] The data to be sent to users preferably has scheduling requirements that dictate when it should be sent. These scheduling requirements may include, for example: frequency, maximum number of times to send to an individual, minimum number of times to send to an individual, time of day to send, and first and last days to send. The data to be sent to users can have demographic requirements that dictate to whom it should be sent. These include (but are not limited to): personal profile, interactive data, network usage information and geographic location.

[0046] The Methods of the Invention

[0047] Referring now to FIG. 4, there is shown a flow chart of a method of distributing data in a network in accordance with the invention. The components 110, 120, 130, 140 work together to deliver data that meets the geographic and demographic criteria.

[0048] After the method begins (step 405), the user preferably uses the client monitoring application 110 to connect to the data access network 120, and then the monitoring server 130 (step 410). If this is the first time the user has connected (step 415), then the user is required to submit personal profile information (step 420). Preferably, the monitoring server 130 periodically will request (step 425) that the client monitoring application 110 have the user update this profile (step 430). Each time the local device 100 connects to the monitoring server 130, the client monitoring application 110 preferably sends data indicating the local device's current geographic location to the monitoring server 130 (step 435).

[0049] Once connected, a number of processes are started (step 440). In one of these processes, whenever the user interacts with data received on the client monitoring application 110, the client monitoring application 110 sends feedback information respecting this interaction to the monitoring server 120. The monitoring server 120 then summarizes and classifies the feedback information into multiple demographic profiles, and stores these profiles in the data store 140.

[0050] In another of these processes, whenever a user uses the browser application 160 to request or access data from the web server 150, the client monitoring application 110 sends feedback information respecting these requests and data accesses to the monitoring server 130. The monitoring server 130 then summarizes and classifies this feedback information into multiple demographic profiles, and stores these profiles in the data store 140.

[0051] In another of these processes, while a user's local device 100 is connected to the web server 150, the monitoring server 130 determines which targeted data needs to be sent to the client monitoring application 110 and then transmits this targeted data to the client monitoring application 110. The monitoring server 130 accomplishes this by:

[0052] examining the scheduling requirements to determine which data needs to be sent;

[0053] examining the demographic requirements of the data to determine to which demographic profiles the data needs to be sent;

[0054] selecting the users who are currently connected that meet the demographic requirements of the data; and

[0055] sending the data to the selected users.

[0056] As mentioned, one of the processes relates to the user's use of his browser application 160. The methods of monitoring the user's browsing is described next.

[0057] In the first step of the method, the client monitoring application 110 is activated on the local device 100 (step 510). The client monitoring application 110 may be installed during manufacture of the local device 100, during use of the local device 100 at the instigation of the user, or may occur automatically as a consequence of other processes. Although at least some aspects of the client monitoring application 110 should be operable from the local device 100, the client monitoring application 100 need not be stored on the local device 100 and can be run from a remote location.

[0058] In the next step of the method, the browser application 160 is activated on the local device 100 (step 515). The browser application 160 may be activated manually, or automatically by a script or through commands issued by the client monitoring application 110. It should be appreciated that the browser application 160 may be activated prior to activation of the client monitoring application 110, though in such a case, the functionality of the client monitoring application 110 will not be available as described below with respect to grabbing URLs from the address bar 220.

[0059] In the next step, the user requests that the browser application 160 display a desired web page (step 520). This may occur in at least three different ways, which are discussed with reference to FIG. 6. FIG. 6 shows the browser window 200 with a web page 610. The address bar 220 displays the URL for the displayed web page 610, www.arterhadden.com/alpha.htm. The displayed web page 610 includes a number of common features to web pages. These features are hyperlinks such as hyperlink 620, buttons such as button 630, and data entry fields such as data entry field 640. Those of ordinary skill in the art appreciate the design of web pages and the functionality of hyperlinks, buttons and data entry fields, so these features are not described further herein.

[0060] One way for the user to request that the browser application display a desired web page is to enter a URL into the address bar 220. For example, to display the web page 610, the user could use the keyboard 102 to type the URL www.arterhadden.com/alpha.htm into the address bar 220. Alternatively, the user could paste the URL into the address bar 220, or use automated means such a script.

[0061] A second way for the user to request that the browser application 160 display a desired web page is to activate a hyperlink displayed on the currently displayed page. For example, to go to the home page on the Arter & Hadden LLP web site, the user could use the pointing device 103 to activate (e.g., click with his mouse on) the hyperlink 620.

[0062] A third way for the user to request that the browser application 160 display a desired web page is through entry of a keyword into a data entry field in a web page displayed in the display pane 210. For example, to search for an attorney with the firm of Arter & Hadden LLP, the user could use the keyboard 102 to type the attorney's last name into the data entry field 640 and click on the Search button 630. It is well known that some data entry fields may be activated by simply typing keywords into the data entry field and typing Enter, and this is also within the scope of the invention.

[0063] Other features that are used for the user to request a desired web page are within the scope of the invention, such as pull-down lists and scroll boxes. It should also be appreciated that a displayed web page may be a static or a dynamic page.

[0064] Returning now to the method of FIG. 5, in the next step, the monitoring application 110 obtains identifying information about the requested web page (step 530). As mentioned above, there are at least three techniques for obtaining information about a requested web page, and these techniques are further described with respect to FIGS. 8A, 8B and 8C, respectively. There are at least three ways in which the client monitoring application 110 can obtain information about the user's use of his browser: (1) by monitoring URLs in the address bar of the browser application 160, (2) by 5 monitoring the stream of URLs transmitted by the browser application 160 to the data access network 120, and (3) by grabbing information from the browser application's display pane 210. Each of these three techniques is described below in turn.

[0065] According to the first technique, the client monitoring application 110 grabs URLs from the address bar. In this technique, after the user requests that the browser application 160 display a desired web page (step 520), the browser application 160 inserts in the address bar the URL corresponding to the web page desired by the user (step 810). This is a normal part of the operation of browser applications such as Microsoft Internet Explorer and Netscape Navigator.

[0066] With respect to the example of FIG. 6, if the keyword “sereboff is entered into the data entry field 640, and the user clicks on the Search button 630, the browser application will display a new web page in the display pane 210, such as web page 710 shown in FIG. 7. In both Microsoft Internet Explorer and Netscape Navigator, the browser application inserts the new URL in the address bar before actually displaying the page identified by the URL. As can be seen in FIG. 7, the browser application has inserted the URL of the displayed web page 710 in the address bar 220. FIG. 7 also shows a new title in the title bar 230—that of the currently displayed page. Whereas the web page of FIG. 6 is entitled, “Arter & Hadden LLP—Attorney Search” and has the URL www.arterhadden.com/alpha.htm, the web page of FIG. 7 is entitled, “Arter & Hadden LLP—Individual Profile” and has the URL www.arterhadden.com/attysearch.gw?s=sereboff.

[0067] After the URL has been inserted into the address bar (step 810), the client monitoring application 110 obtains the URL from the address bar (step 820). In the preferred embodiment, the client monitoring application monitors the title bar 230. This can be done by setting an appropriate hook, in the manner known in the art. The client monitoring application recognizes if the title has changed, and if so, obtains the new URL from the address bar. Other techniques for recognizing that the URL in the address bar have changed are within the scope of the invention.

[0068] According to the second technique for obtaining information about a requested web page, the client monitoring application 110 grabs URLs from the communications stream between the browser application 160 and the web server 150. In this technique, after the user requests that the browser application 160 display a desired web page (step 520), the browser application 160 transmits the URL of the desired web page to the web server 150 (step 830). The URL will be available within the local device 100 at a number of software and hardware levels, and the client monitoring application 110 can set hooks or create traps at any of these levels as may be desired. After the URL is transmitted from the browser application 160 (step 830), the client monitoring application 110 obtains the URL from the transmission (step 840).

[0069] According to the third technique for obtaining information about a requested web page, the client monitoring application 110 grabs information from the browser application's display pane 210, or the object corresponding to the display pane 210. In this technique, after the user requests that the browser application 160 display a desired web page (step 520), client monitoring application 110 determines if the displayed page (e.g., page 610) includes a data entry field (step 850). If not, then the client monitoring application 110 has nothing to do (step 860). However, if the displayed web page has a data entry field, then the client monitoring application 110 determines if the user has entered anything in the data entry field (step 870). If the user has not entered anything into the data entry field, then the client monitoring application 110 has nothing to do (step 860). However, if the user has entered keywords into the data entry field, then the client monitoring application 110 copies these keywords (step 880). There are a number of ways to test if a web page has a data entry field, and to copy entered keywords. These include screen scraping, parsing web pages received by the local device 100, copying keystrokes, etc. If the user selects a hyperlink, the client monitoring application 110 can obtain the URL associated with the hyperlink from the HTML source of the displayed page having the hyperlink.

[0070] After the client monitoring application 110 obtains the information about the requested web page (step 530), the client monitoring application 110 parses the copied information, and derives monitoring information from the copied information (step 535). As described above, the client monitoring application 110 will have grabbed a URL, keywords, or other information. The particular nature of the monitoring information is not critical to the present invention. However, in the preferred embodiment, the monitoring information is used for targeting advertising to the user. Thus, useful information which is desirable for monitoring includes the top level domain name and the second level domain name. Other useful information are keywords entered by the user into data entry fields.

[0071] For some URLs, such as search engines, the keywords are particularly useful. The client monitoring application 110 preferably recognizes when the user is browsing a search engine, and in such a case grabs the search terms (keywords) entered by the user in the search engine's search box (data entry field). The client monitoring application 110 preferably can recognize the major search engines from their second level domain names, e.g. “yahoo,” “excite,” “altavista,” “lycos,” “infoseek” and “go.”

[0072] In some embodiments, it might be desirable for the client monitoring application 110 to transmit the entire URL to the monitoring server 130.

[0073] With the monitoring information derived (step 535), the client monitoring application 110 next transmits the monitoring information to the monitoring server 130 (step 540). In some embodiments, the monitoring information should be transmitted in a coded or secure format. Furthermore, in some embodiments, the monitoring information should be transmitted in a batch form. The process then loops back to step 520 and continues until the client monitoring application 110 or the browser application 160 is de-activated (e.g., closed).

[0074] As can be seen, this process permits browsing by the user, and monitoring of that browsing, without interfering with the user's use of the browser application.

[0075] Although exemplary embodiments of the present invention have been shown and described, it will be apparent to those having ordinary skill in the art that a number of changes, modifications, or alterations to the invention as described herein may be made, none of which depart from the spirit of the present invention. All such changes, modifications and alterations should therefore be seen as within the scope of the present invention.