Google Inc.

Alex Daniel Jacobson

Gang Wang

Laura Eidem

Tuna Toksoz

Spencer S Johnson

Priyanshu Jain

Marcel M Moti Yung

Michael Wright

Nicholas Neil Kralevich, Iv

Giles Dominic Hogben

Sudhi Herle

Sudhi P Herle

Bram Bonné

Nicholas N Kralevich

Bram Bonne

Giles Hogben

Bram BonnÉ

Nicholas N Iv Kralevich

Laura Marie Eidem

A method for establishing content authenticity when aggregating content includes receiving a content package that includes a content item hosted by a content publisher site and a first digital signature. The method also includes determining whether the content package satisfies authenticity criteria, at least in part by decrypting the first digital signature using a first public key to produce a plurality of hashes. The first public key is associated with a particular content publisher, the plurality of hashes includes a hash of first data that includes at least a first portion of the content item and a hash of second data that includes at least a second portion of the content item and omits at least the first portion. The method also includes providing aggregated content to content consumers, by including or restricting access to a link based on whether the content package satisfies the authenticity criteria.

Source authentication for content aggregators

This disclosure relates to generating telecommunication network measurements. In one aspect, a method includes presenting, by a client device, a digital component that, when interacted with, initiates a call by the client device to a phone number specified by the digital component. A trusted program stores, in a presentation event data structure, a presentation event data element specifying the phone number and resource locator for a reporting system to which reports for the digital component are sent. The trusted program detects a phone call by the client device to a given phone number. The given phone number is compared to one or more presentation event data elements stored in the presentation event data structure. A determination is made that the given phone number matches the phone number specified by the digital component. In response, an event report is transmitted to the reporting system.

Preventing data manipulation and protecting user privacy in telecommunication network measurements

This disclosure relates to generating location event measurements. In one aspect, a method includes presenting, by a client device, a digital component comprising geofence data that defines one or more physical locations corresponding to the digital component. In response to presenting the digital component, a trusted program of the client device stores, in a presentation event data structure, a presentation event data element specifying the geofence data. The trusted program detects, based on location information indicating a current location of the client device and the geofence data that the client device is within one of the one or more physical locations. In response to detecting that the client device is within one of the one or more physical locations, an event report is transmitted to a reporting system for the digital component. The event report indicates that a location event for the digital component has occurred.

Preventing data manipulation and protecting user privacy in determining accurate location event measurements

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for validating interactions with false rendered elements. In one aspect, a method includes receiving a rendering notification and a declaration of a rendered element defined in an active window on a client device, detecting interaction with the rendered element at the client device, determining whether the interaction occurred at a declared location of the rendered element within the active window, and processing the interaction including: in response to determining that the interaction occurred: capturing a screenshot of the active window on the client device; verifying a visual appearance of the rendered element in the screenshot with a declared appearance of the rendered element, and generating an interaction attestation, thereby validating the interaction. In response to determining that the interaction did not occur, refraining from generating the interaction attestation.

Tamper-proof interaction data

This disclosure describes systems and techniques for using controlling access to user information using ephemeral user identifiers. In one aspect, a method includes determining, for a given domain, engagement by a user with content provided by the given domain for display by an application at a client device of the user. A determination is made, based on the engagement by the user, to extend, for the given domain, a linkage between user identifiers for a user of the application. In response to determining to extend, for the given domain, the linkage between the user identifiers for the user of the application, one or more future domain-specific ephemeral user identifiers for the user and the given domain are obtained. An attestation record that includes a current domain-specific ephemeral user identifier and the one or more is generated and sent to the given domain.

Secure network communications that limit information access

Systems and methods for detecting improper presentation of content items by applications executing on client devices. A method can include: (i) receiving content requests from a plurality of client devices, wherein each of the content requests is generated by an application executing on a respective client device of the plurality of client devices; (ii) transmitting to each client device of the plurality of client devices, responsive to a content request from the client device, a content package including at least a content item and an interaction confirmation script; (iii) determining a location parameter associated with the interaction confirmation script; (iv) determining a performance metric of the content item; and (v) determining whether the application receives inadvertent clicks at the content item based on the performance metric and the location parameter.

Systems and methods for detecting improper implementation of presentation of content items by applications executing on client devices

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, to verify whether an interaction with a particular content displayed on a content platform is an interaction by an actual human user. A request to generate a click verification token can be received from a first application executing on a client device. The request can include data for a first set of parameters for a first interaction and a first message authentication code (MAC) set. If the first MAC set matches a second MAC set, which is generated using some of the data included in the request, the click verification token can be generated. The click verification token can be provided to the first application, which in turn can provide this token to a content verification system. The content verification can use this token to verify whether the first interaction is an actual human user interaction.

Verifying user interactions on a content platform

Methods, systems, and computer readable medium for verifying interactions with digital components. The method includes receiving input indicating interaction associated with a digital component that is provided by a content provider and presented by a user interface of the user device, determining, by a trusted program of the user device, that the interaction is valid, generating, by the trusted program and based on the determination that the interaction is valid based on a validity evaluation, a digitally signed token that attests the validity of the interaction with the digital component, and providing, by the trusted program and to a third party, the digitally signed token as an indication of the validity of the interaction.

Data integrity with trusted code attestation tokens

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for detecting errors that can occur in third party content presentation and verifying that third party content provided by a content provider to a content platform is actually displayed and is visible to the user when the content platform is accessed on the client device. Methods can include receiving, from an application executing on a client device, a request to generate a digitally signed token that is used to validate whether a particular content item displayed at the particular portion of the display is a third party content item. A digital watermark embedded at the particular portion of the display can be extracted and decoded to obtain data for attributes that are descriptive of the particular content item. A digitally signed token can be generated using this data, and the token can then be provided to application.

Verifying display of third party content at a client device

Systems and methods for detecting improper presentation of content items by applications executing on client devices. A method can include receiving a content package including a first content item, a second content item and an interaction confirmation script, the interaction confirmation script configured to execute within an application and cause the application to detect, responsive to the first content item presented, a first interaction event with the first content item; present, upon detecting the first interaction event on the first content item, the second content item; detect a second interaction event with the second content item; transmit, upon detecting the second interaction event, a confirmation of the first interaction event; and transmit a request to access an information resource linked to the second content item. The method can further include presenting the information resource responsive to the second interaction event on the second content item.

Improving data integrity with trusted code attestation tokens

Modifying computer program output in a voice or non-text input activated environment is provided. A system can receive audio signals detected by a microphone of a device. The system can parse the audio signal to identify a computer program to invoke. The computer program can identify a dialog data structure. The system can modify the identified dialog data structure to include a content item. The system can provide the modified dialog data structure to a computing device for presentation.

Growing community of inventors

Mountain View, CA, United States of America

Alex Daniel Jacobson