System and method for adult approval URL pre-screening

[0001] 1. Field of the Invention

[0002] The present invention is generally related to Internet technology. More particularly, the present invention is related to a system and method for parental control of Internet Web sites viewed by a child in a network environment.

[0003] 2. Description

[0004] Web sites accessible via the Internet contain all sorts of content. Some of the content may not be desirable for children. To prevent children from browsing undesirable Web content, some browsers enable the filtering of undesirable Internet content by enabling children to only browse from a selected list of Web sites.

[0005] Parental monitoring services also exist that provide a database on the home computer that is maintained by a service provider subscribed to by the parent. The service provider keeps track of acceptable Web sites for children. Web sites inappropriate for children are excluded from the database. The database is periodically updated by the service provider.

[0006] New Web sites are added to the Internet on a daily basis. Often times the parental monitoring service may not be aware of the new Web sites that are acceptable for children for weeks or months. Also, these services do not allow the parent to make their own discretionary choices as well as to add or subtract from the database in real-time the Web sites available to their children. Thus, new acceptable Web sites may or may not be included in the database for weeks or months.

[0007] Thus, what is needed is a system and method for enabling a parent to have first-view rights as to what their child is trying to access on the Internet in real-time. What is also needed is a system and method that allows the parent to approve or deny access to a child's Web site request prior to the child's ability to browse the Web site. What is further needed is a system and method that allows the parent to investigate links associated with the child's requested Web site, thereby allowing the child access to an acceptable Web site, yet preventing the child from viewing links that include undesirable content.

[0015] While the present invention is described herein with reference to illustrative embodiments for particular applications, it should be understood that the invention is not limited thereto. Those skilled in the relevant art(s) with access to the teachings provided herein will recognize additional modifications, applications, and embodiments within the scope thereof and additional fields in which embodiments of the present invention would be of significant utility.

[0016] Reference in the specification to “one embodiment”, “an embodiment” or “another embodiment” of the present invention means that a particular feature, structure characteristic described in connection with the embodiment is included in at least one embodiment of the present invention. Thus, the appearances of the phrase “in one embodiment” or “in an embodiment” appearing in various places throughout the specification are not necessarily all referring to the same embodiment.

[0017] Embodiments of the present invention are directed to a system and method for enabling a parent to have first-view rights as to what their child is trying to access on the Internet in real-time. The parent, after viewing the Web site, may deny or approve access to the Web site by the child. This is accomplished by implementing a gatekeeper. The gatekeeper allows the parent to view the Web site prior to the child having access to the requested site. If the parent does not approve of the Web site, access to the Web site is denied to the child via the gatekeeper. If the parent does approve of the Web site, access to the Web site by the child is allowed via the gatekeeper. The gatekeeper also keeps a log of all requested Web sites for each child. All approved Web sites are maintained in a database, such that when a child requests a Web site that has already been approved by the parent, the gatekeeper will allow the child access to the Web site without querying the parent.

[0018] Embodiments of the present invention are described as being implemented in a home network environment. Although embodiments of the present invention are being described as being implemented in a home network environment, one skilled in the relevant art(s) would know that embodiments of the present invention may also be implemented in other networking environments. Such networking environments may include, but are not limited to, a school network environment where the principal, teachers, and/or counselors may provide approval or disapproval of Web sites for student access.

[0019] FIG. 1 is a block diagram illustrating an exemplary home network system 100 in which the present invention may be implemented according to an embodiment of the present invention. Home network system 100 may include a home network 102 that is coupled to a wide area network (WAN), such as the Internet 118, via an ISP (Internet Service Provider) server 116. Home network 102 may be coupled to ISP server 116 using an Internet connection 114, such as, a dial-in connection, a high-speed cable modem, a digital subscriber line (DSL), or any other means capable of connecting home network 102 to ISP server 116.

[0020] Home network 102 is a local area network (LAN) that may connect, computers, televisions, audio/video players, and other home equipment using a wired medium, such as, for example, Ethernet. Home network equipment may also be connected using a wireless medium, such as Bluetooth or any other wireless protocol based on the IEEE 802.11 standard, IEEE Standards for Information Technology/Telecommunications and Information Exchange Between Systems, ISO/IEC 8802-11 (1999). Home network 102 comprises, inter alia, a personal computer (PC) 104 having the ability to be accessed by adults only, such as a parent or guardian (also referred to as a parent PC), a gatekeeper PC 106, one or more PCs 108-1 . . . 108-n having the ability to be accessed by one or more children (also referred to as child PCs), a combination hub/router 110, a firewall 112, and Internet connection 114.

[0021] Parent PC 104 is coupled to gatekeeper 106 and hub/router 110. Gatekeeper 106 is coupled to parent PC 104, hub/router 110, and child PCs 108-1 . . . 108-n. Hub/router 110 is coupled to parent PC 104, gatekeeper 106, and firewall 112. Firewall 112 is coupled to Internet connection 114 and hub/router 110. Internet connection 114 is coupled to Internet 118 via ISP server 116.

[0022] Parent PC 104, gatekeeper computer 106, and child PCs 108-1 . . . 108-n are each personal computers (PCs). PCs have their own operating system, software, and peripherals to enable them to operate independently. Each PC (104, 106, and 108-1 . . . 108-n) includes a network interface (not shown) to enable a network configuration of each PC in home network 102. PCs are well known to those skilled in the relevant art(s).

[0023] Parent PC 104 may be used by a parent or guardian. Child PCs may be used by children within the home. In a home network where only one child exists, home network 102 may only include one child PC 108-1. Where two or more children exist, home network 102 may include two or more child PCs 108-1 . . . 108-n, one child PC for each child in the family. In this instance, each child is identified by their PC. Alternatively, where two or more children exist, home network 102 may have one child PC 108-1. In this instance, each child is identified by a login name.

[0024] Where one or more children exist, home network 102 may include a plurality of child PCs 108-1 . . . 108-n, each child having a plurality of accounts. In one embodiment, each account may be associated with a different child PC 108-1 . . . 108-n. In another embodiment, each child may use any account on any one of the plurality of child PCs 108-1 . . . 108-n.

[0025] Gatekeeper PC 106 acts as an access controller to control access to Internet 118 by one or more child PCs 108-1 . . . 108-n. Parent PC 104 manages gatekeeper PC 106. The functionality of gatekeeper 106 may be implemented in hardware, software, or a combination thereof.

[0026] Child PCs 108-1 . . . 108-n request access to Internet 118 through gatekeeper PC 106. Permission to access a Web page on Internet 118 is granted by parent PC 104 via gatekeeper 106. Gatekeeper PC 106 restricts Internet access on each child PC (108-1 . . . 108-n) by receiving all URL (Uniform Resource Locator) requests made from any child PC (108-1 . . . 108-n) and comparing the requested URL to a table or database of acceptable URLs for the corresponding child. If the URL is included in the table of acceptable URLs, an automatic grant is sent from gatekeeper PC 106 to the corresponding child PC (108-1 . . . 108-n). The automatic grant enables the child to access the Web page associated with the requested URL via gatekeeper 106. If the URL is not included in the table of acceptable URLs, gatekeeper PC 106 accepts the request from the corresponding child PC, retrieves the Web page corresponding to the requested URL from the Internet, and sends the corresponding Web page to parent PC 104 to be previewed by the parent/guardian for acceptable viewing by the child.

[0027] In one embodiment, the URL data is passed to the parent/guardian PC. A rendered thumbnail of the Web page may be used as an icon that the parent clicks on with a pointing device, such as, but not limited to, a mouse, to activate access of the link. Thus, in this embodiment, the entire Web page is not cached and sent to the parent/guardian.

[0028] To provide high speed Internet access to home network 102, Internet connection 114 is coupled to hub/router 110. As previously indicated, Internet connection 114 may include, but is not limited to, a cable modem, a DSL modem, or any other high speed means of providing Internet access. The hub portion of hub/router 110 connects Parent PC 104, gatekeeper PC 106, and child PCs 108-1 . . . 108-n, via gatekeeper PC 106, together in order to share files and devices, such as, but not limited to, printers (not shown), scanners (not shown), etc. The router portion of hub/router 110 connects all of the PCs (104, 106, and 108-1 . . . 108-n) to Internet 118 via ISP 116, firewall 112, and Internet connection 114. In order for hub/router 110 to interact with Internet 118, an IP (Internet Protocol) address is needed. The IP address is provided by ISP server 116. Internal IP addresses are provided by hub/router 110 for each PC within home network 102. In the embodiment shown in FIG. 1, parent PC 104 and gatekeeper PC 106 are provided internal IP addresses. Child PCs 108-1 . . . 108-n receive Internet content via gatekeeper 106, and are differentiated by gatekeeper PC 106, not by hub/router 110 via internal IP addresses.

[0029] Firewall 112 is used to protect PCs 104, 106, and 108-1 . . . 108-n against hackers and other dangers on Internet 118. Firewall 112 stops hackers from breaking into home network 102.

[0030] In one embodiment, gatekeeper 106 may be implemented on parent PC 104 as shown in FIG. 2. According to this embodiment, parent PC 104 acts as a proxy server and controls the functionality of gatekeeper 106 to prevent direct access to Internet 118 via child PCs 108-1 . . . 108-n. Gatekeeper 106 may be implemented in hardware, software, or a combination thereof. Child PCs 108-1 . . . 108-n are coupled directly to parent PC 104, thus, preventing direct access to Internet 118 by any child PC (108-1 . . . 108-n). In other words, Web content from Internet 118 for any child PC 108-1 . . . 108-n must go through parent PC 104 since parent PC 104 is the only PC directly connected to Internet 118.

[0031] FIG. 3 is a block diagram illustrating another exemplary system in which the present invention may be implemented according to an embodiment of the present invention. In this embodiment, gatekeeper 304 (shown in phantom) is distributed within each PC 302-1, 302-2, . . . 302-n in home network 102. Each user, i.e., parent/guardian and children, is identified by their login identification. A PC identified as having a parent/guardian login will be the managing PC for gatekeeper 304. PCs identified as having a child login will have their URL requests routed to the managing PC for permission via gatekeeper 304 to view a Web page associated with the requested URL as previously described.

[0032] Although the above embodiments of the system have included traditional PCs, the invention is not limited to this embodiment. In fact, a television having an enhanced set-top box may be substituted for any or all of the PCs in the home network. In fact, complex set-top boxes that include high quality processors, such as, but not limited to, mobile Intel® processors manufactured by Intel Corporation, add personal computer (PC) functions to the set-top box. The set-top box allows one to browse the Internet in a manner similar to a traditional PC.

[0033] FIG. 4A is a flow diagram 400 describing a method for parent/guardian approval URL pre-screening according to an embodiment of the present invention. The invention is not limited to the embodiment described herein with respect to flow diagram 400. Rather, it will be apparent to persons skilled in the relevant art(s) after reading the teachings provided herein that other functional flow diagrams are within the scope of the invention. The process begins with block 402, where the process immediately proceeds to block 404.

[0034] In block 404, using a browser, a child makes a request to view a Web page. In other words, a child enters a URL into their Web browser for a location they want to visit.

[0035] Direct Internet access is restricted on the child's PC. Thus, in block 406, an application on the child's PC sends the URL request to the gatekeeper. In one embodiment, the application may be a custom plug-in for the browser. The browser may include a tool bar notification icon to indicate that the URL has been sent to the gatekeeper for permission to view. In another embodiment, the application may be separate from the browser, yet operate in parallel with the browser. When the child makes a URL request, the application, being aware of all browser activity and URL requests, will direct the request to the gatekeeper. A pop-up dialog from the application may be used to notify the child that the URL has been sent to the gatekeeper for permission to view.

[0036] In many instances, children may request multiple URLs before access to the first request is approved or denied. In this case, the URLs are put into a queue within the gatekeeper for handling by the parent/guardian. In one embodiment, limited queuing may exist. For example, the queue may be limited to five requests. After five requests have been made, a sixth request will not enter the queue until the first request has been approved or denied by the parent/guardian. In another embodiment, unlimited queuing may exist. In this instance, no limitations are put on the number of URL requests that may be in the queue awaiting approval.

[0037] The gatekeeper maintains a table or database of accepted URLs for each child. In block 408, the gatekeeper will compare the requested URL with the accepted URLs in the table. In decision block 410, it is determined whether the requested URL is found in the table. If the requested URL is found in the table, an automatic grant is sent to the child's PC indicating that the child may have access to the Web page in block 412. The Web page is then routed via the gatekeeper to the child's PC for the child to browse. In one embodiment, a notice is sent to the parent/guardian that the child has been granted access to the requested URL. Optionally, the request as well as the grant may be logged. The process then proceeds back to block 404, where the child may make another URL request if the child so desires.

[0038] Returning to decision block 410, if it is determined that the requested URL is not found in the table, the process proceeds to block 414. In block 414, the Web page identified by the requested URL is accessed by the gatekeeper. A thumbnail of the Web page is created by the gatekeeper in block 416.

[0039] The parent/guardian is then notified of the request in block 418. The request may be in the form of an alert indicator. In one embodiment, the alert indicator may be a blinking icon. In another embodiment, an icon may change color, such as going from gray to red, with red being an indication that action is required by the parent/guardian. In yet another embodiment, an icon may change bitmap or animate. One skilled in the relevant art(s) would know that other methods of notification may also be used. Notification of the request to the parent/guardian also preloads the thumbnail into a browser of parent/guardian PC.

[0040] In block 420, the parent/guardian may view the thumbnail of the Web page by placing their mouse over the blinking icon as shown in FIG. 4B. In one embodiment, a window 440 may drop down from the icon 442, allowing the parent/guardian to view a thumbnail 444 of the requested Web page. In one embodiment, the parent may click on the blinking icon 442 to view a full frame of the requested Web page.

[0041] A set of approval controls 446 are included with each thumbnail. In one embodiment, the set of approval controls include view 448, thumbs up 450 (indicating approval) and thumbs down 452 (indicating disapproval). A parent may select the view option 448 to view the Web page. When this occurs, a special frame is used. The frame preserves the control options. A parent may opt to approve the Web page by selecting the thumbs up option 450. A parent may also opt to disapprove the Web page by selecting the thumbs down option 452.

[0042] Although an embodiment of the present invention is illustrated as having approval controls view 448, thumbs up 450, and thumbs down 452, the invention is not limited to these approval controls. In fact, one skilled in the relevant art(s) would know that other approval controls may also be used. For example, a chat control may be implemented in the set of approval controls that enable the parent, via a chat window, to communicate with the child. For example, the parent may request additional information from the child regarding the Web site. Such information may query the child as to how they found out about the Web page, why the child wants to browse the Web page, etc. In one embodiment, the chat window may be used to communicate with others outside of the family unit, such as, but not limited to, other parents, parent groups, teachers, etc.

[0043] In one embodiment, the approval controls 446 may include drop down menus (not shown) that include additional levels of acceptance and denial for a URL request. For example, Web pages include links to other Web pages. A parent/guardian, after reviewing the links, may decide that the child may only have permission to view the Web page. In another instance, the parent/guardian may decide to allow the child to view the Web page with a link depth of four. Links that already have approval are always allowed. A parent/guardian may also approve a Web page for viewing over a time frame. For example, a parent/guardian may allow the child to view a game Web page on weekends only. In this case, the gatekeeper will have to remove the game Web page from the acceptance table during weekdays and enter the game Web page in the acceptance table during weekends. Another acceptance level may enable the parent/guardian to allow unlimited access to the requested Web page, but limit access to the links. Thus, the link depth could have a different expiration than the requested Web page.

[0044] Approval controls 446 for the denial option may include, but are not limited to, deny for a predetermined amount of time (to be specified by the parent/guardian), deny until parent/guardian can consult with someone else or do more research, ask again later, etc.

[0045] In decision block 422, the parent/guardian approves or denies the child access to the Web page. Note that the parent/guardian must make a decision to move to the next requested Web page. If the parent/guardian approves viewing of the Web page by the child, the process proceeds to block 424.

[0046] In block 424, the table or database of approved Web pages/URLs for the child in question is updated. The process then proceeds to block 412, where the child is granted access to the Web page.

[0047] Returning to decision block 422, if the parent/guardian denies the child access to the Web page, the process proceeds to block 426.

[0048] In block 426, the table or database of denied Web pages/URLs for the child in question is updated. The process then proceeds to block 428.

[0049] In block 428, a message is sent to the child indicating denial of the Web page for viewing by the child. The process then proceeds back to block 404 to obtain another URL request.

[0050] Often times a parent/guardian may not be available to receive an alert on their PC. In one embodiment, the parent/guardian may be notified via the home television that is connected to home network 102.

[0051] In another embodiment, proxy gatekeepers, such as trusted friends and family, may be used to monitor and approve Web pages requested by the child via the Internet.

[0052] In another embodiment, a parent may remain actively engaged in the monitoring process even while away from their PC. Other devices, owned by the parent, may be notified by the gatekeeper to allow the parent/guardian to perform interactive monitoring. For example, if a response from the parent/guardian is not received within a predetermined time frame, the parent/guardian may be notified by the gatekeeper via an email, instant messaging, etc. on their work computer, PDA (personal digital assistant), cell phone, or other mobile devices. A list of devices may be used by the gatekeeper to notify the parent/guardian. For example, if the parent/guardian is not available at their PC, the gatekeeper may send a message to the parent/guardian's work PC. If no response is obtained within a predetermined time frame, the gatekeeper may send a message to the parent/guardian's cell phone. If no response is obtained, then the PDA will be notified. This process will repeat until the list of devices are exhausted with no response from the parent/guardian.

[0053] Embodiments of the present invention may be implemented using hardware, software, or a combination thereof and may be implemented in one or more computer systems or other processing systems. In fact, in one embodiment, the invention is directed toward one or more computer systems capable of carrying out the functionality described here. An example implementation of a computer system 500 is shown in FIG. 5. Various embodiments are described in terms of this exemplary computer system 500. After reading this description, it will be apparent to a person skilled in the relevant art how to implement the invention using other computer systems and/or computer architectures.

[0054] Computer system 500 includes one or more processors, such as processor 503. Processor 503 is connected to a communication bus 502. Computer system 500 also includes a main memory 505, preferably random access memory (RAM) or a derivative thereof (such as SRAM, DRAM, etc.), and may also include a secondary memory 510. Secondary memory 510 may include, for example, a hard disk drive 512 and/or a removable storage drive 514, representing a floppy disk drive, a magnetic tape drive, an optical disk drive, etc. Removable storage drive 514 reads from and/or writes to a removable storage unit 518 in a well-known manner. Removable storage unit 518 represents a floppy disk, magnetic tape, optical disk, etc., which is read by and written to by removable storage drive 514. As will be appreciated, removable storage unit 518 includes a computer usable storage medium having stored therein computer software and/or data.

[0055] In alternative embodiments, secondary memory 510 may include other similar means for allowing computer programs or other instructions to be loaded into computer system 500. Such means may include, for example, a removable storage unit 522 and an interface 520. Examples of such may include a program cartridge and cartridge interface (such as that found in video game devices), a removable memory chip (such as an EPROM (erasable programmable read-only memory), PROM (programmable read-only memory), or FLASH memory, such as FLASH memory device 100) and associated socket, and other removable storage units 522 and interfaces 520 which allow software and data to be transferred from removable storage unit 522 to computer system 500.

[0056] Computer system 500 may also include a communications interface 524. Communications interface 524 allows software and data to be transferred between computer system 500 and external devices. Examples of communications interface 524 may include a modem, a network interface (such as an Ethernet card), a communications port, a PCMCIA (personal computer memory card international association) slot and card, a wireless LAN (local area network) interface, etc. Software and data transferred via communications interface 524 are in the form of signals 528 which may be electronic, electromagnetic, optical or other signals capable of being received by communications interface 524. These signals 528 are provided to communications interface 524 via a communications path (i.e., channel) 526. Channel 526 carries signals 528 and may be implemented using wire or cable, fiber optics, a phone line, a cellular phone link, a wireless link, and other communications channels.

[0057] In this document, the term “computer program product” refers to removable storage units 518, 522, and signals 528. These computer program products are means for providing software to computer system 500. Embodiments of the invention are directed to such computer program products.

[0058] Computer programs (also called computer control logic) are stored in main memory 505, and/or secondary memory 510 and/or in computer program products. Computer programs may also be received via communications interface 524. Such computer programs, when executed, enable computer system 500 to perform the features of the present invention as discussed herein. In particular, the computer programs, when executed, enable processor 503 to perform the features of embodiments of the present invention. Accordingly, such computer programs represent controllers of computer system 500.

[0059] In an embodiment where the invention is implemented using software, the software may be stored in a computer program product and loaded into computer system 500 using removable storage drive 514, hard drive 512 or communications interface 524. The control logic (software), when executed by processor 503, causes processor 503 to perform the functions of the invention as described herein.

[0060] In another embodiment, the invention is implemented primarily in hardware using, for example, hardware components such as application specific integrated circuits (ASICs). Implementation of hardware state machine(s) so as to perform the functions described herein will be apparent to persons skilled in the relevant art(s). In yet another embodiment, the invention is implemented using a combination of both hardware and software.

[0061] While various embodiments of the present invention have been described above, it should be understood that they have been presented by way of example only, and not limitation. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined in the appended claims. Thus, the breadth and scope of the present invention should not be limited by any of the above-described exemplary embodiments, but should be defined in accordance with the following claims and their equivalents.