Google Inc.

Intuit, Inc.

Microsoft Technology Licensing, LLC

Storz Endoskop Produktions Gmbh

Ncr Corporation

Bridgelux Incorporated

Microsoft Corporation

Storz Endoskop Producktions Gmbh

Gang Wang

Kevin M McCluskey

Marcel M Moti Yung

Luis Felipe Cabrera

David Alan Hanekamp, Jr

Alex Daniel Jacobson

Jay J Yu

Yian Gao

Michael J Graves

Alex G Balazs

Per-Kristian G Halvorsen

Arien C Ferrell

Matthew L Sivertson

Marcel M M Yung

Michael A Artamonov

Matteo Contolini

Heinz-Werner Stiller

Jennifer Lynn Keenan

Yong Yao

Chengyi Zheng

Sagnik Nandy

Vinay Kumar

Kevin Wei Li Yeo

Kyle J Ryan

Suzette Tritt

Michael Kleber

Paul C Sutton

Gerald Baron Huff

Daniel P Dunbar

David Bruce Turner

Gregory W Miller

Sasha Mikhael Perez

Josh Karlin

Yi-Qun Li

Igor A Podgorny

Amir R Eftekhari

Thomas G Phillips

Ronald Jason Char

Yijian Bai

Ardian Poernomo

Nitish John Korula

Ganesh Bhat

Andre Felipe Luis

Matthew Allen Brincho

Peter Lubczynski

Jonathan Michael Krafcik

Steven J Atkinson

Matthew A Lisowski

Nunzio Thron

Sarvar M Patel

Marcel Mordechay Yung

Daniel Ramage

William Taylor Laaser

P Keith Muller

Carol Ann Howe

Joseph Ted Dibene, Ii

Mariana Raykova

Zhenyu Liu

Deepak Ravichandran

Benjamin Kreuter

Jun-Gang Zhao

Karn Seth

Troy D Otillio

Matthew Young-Lai

Zoltan Szamonek

Bojan Beran

Haskell Aaron Garon

Creighton Thomas

Jeffery Weber

Erikheath A Thomas

Andres Munoz Medina

Arpana Hosabettu

Douglas N Gordin

Qing Feng Zhang

David Chatenever

Bennett R Blank

Massimo Mascaro

Curt Andrew Steeb

Joseph Elwell

Shreedhar Madhavapeddi

Nankun Huang

James Leo Knighten

Evgeny Skvortsov

Saikat Mukherjee

Anu Sreepathy

Zeyong Xu

Martin Holladay

Manish Ramesh Shah

Cem Unsal

John Brian Moss

Aminish Sharma

Jeffrey P Ludwig

Thirugnanam Subbiah

Nicholas Neil Kralevich, Iv

Kenneth W Hanscom

Raghunath Battula

Paul Bober

Anoop Makwana

Charles Richard Honton

Tancrède Lepoint

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for selecting and distributing digital components to client devices in ways that protect user privacy and confidential data of content platforms and/or digital component providers are described. In one aspect, a method includes receiving, by a secure distribution system and from a client device of a user, a digital component request that includes, for each of multiple content platforms that distribute digital components to users, a corresponding user embedding comprising weights indicative of the relevance of multiple features to the user. The secure distribution system provides each user embedding as input to a respective isolated execution environment for the content platform corresponding to the user embedding, wherein the secure distribution system hosts each isolated execution environment. Digital component selection data generated based on the user embedding is received from each isolated execution environment.

Privacy preserving custom embeddings

This document relates to using secure MPC to select digital components in ways that preserve user privacy and protects the security of data of each party that is involved in the selection process. In one aspect, a method includes receiving, by a first server of a secure MPC system from a client device, a digital component request. The first server identifies, for each digital component in a set, a selection value and a priority tier. For each tier, the first server determines, using a secure MPC process in collaboration with one or more second servers of the secure MPC system, a first secret share of a winner parameter for each digital component in the priority tier. The first server identifies a highest tier for which a given digital component has a winner parameter that indicates that the given digital component is a winning digital component.

Flexible content selection processes using secure multi-party computation

This disclosure relates to verifying the trustworthiness of web applications. In one aspect, a method includes obtaining, by a browser of a client device, an electronic resource comprising code for a web application. The browser renders the electronic resource, including processing the code of the web application. The code causes the browser to initiate a request to a remote server. In response to processing the code, the request is generated and modified to include at least a portion of an integrity element for the web application. The modified request is sent to the remote server. A response to the request is received from the remote server. The response is based on the remote server verifying that the web application is trustworthy using the integrity element. Data is displayed based on the response.

Verifying the trustworthiness of web applications

Methods, systems, and apparatus, including medium-encoded computer program products, for secure workflows that enhance data security are described. In one aspect, a digital component request is received. In response to receiving the digital component request, a multi-stage workflow for selecting a digital component is identified, and can include customizable stages. The execution of workflow stages includes: (A) identifying a given customizable stage; (B) for the stage: (i) identifying, a customization specific to the stage that generates an output for use in selecting the digital component; (ii) initiating an isolated execution environment for each customization; (iii) executing, within each isolated execution environment, the customization for which the isolated execution environment was initiated; and (iv) obtaining the output generated by the code of each isolated execution environment; and (C) executing a final stage to select a digital component based on the outputs. The selected digital component is sent to the client device.

Secure workflows that enhance data security

This document describes systems and techniques for improving the integrity and protecting the security of information in content selection and distribution. In one aspect, a method includes receiving, by a first server of a secure multi-party computation (MPC) system from an application on a user device, a request for a digital component. The request is parsed into distinct sub-requests. Each sub-request is transmitted to a different server. A set of candidate selection values is received from a separate server. The first server performs, in collaboration with one or more second servers of the MPC system, a selection process to generate a selection result for a winning digital component, including merging, the first set of candidate selection values and a set of cached selection values to create a final set of candidate selection values and sorting the final set according to the values of the candidate selection values.

Using secure multi-party computation to improve content selection process integrity

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for distributing digital component while securing user data are described. In one aspect, a method includes receiving, by a multi-platform server and from a client device, a request for a digital component for presentation by the client device. The request for the digital component includes (i) request data that is opaque to the multi-platform server, and (ii) sensitive user data that is managed by the client device. In response to receiving the request for the digital component, the multi-platform server transmits, to a first content platform, a contextual request that includes the request data from the client device and that does not include the sensitive user data. After transmitting the contextual request, the multi-platform server receives, from the first content platform, a contextual response that includes a selection data unit for a first repository of digital components.

Distributing digital components while securing user data

An LED-filament comprising: a partially light transmissive substrate; a plurality of LED chips on a front face of the substrate; a photoluminescence material that is in direct contact with and covers all of the plurality of LED chips; and a light scattering layer that is in direct contact with and covers at least the photoluminescence material, wherein the light scattering layer comprises particles of light scattering material, and wherein the photoluminescence material comprises broadband green to red photoluminescence materials and narrowband red photoluminescence material.

LED-filament comprising a light scattering material layer

Methods, systems, and apparatus, including an apparatus for verifying the integrity of requests and the devices that sent the requests. In some aspects, a method includes receiving, from a client device, a request including an attestation token generated by the client device. The attestation token includes a set of data that includes at least a public key of the client device, a token creation, and a device integrity token that includes a verdict. The attestation token also includes a digital signature of the set of data generated using a private key corresponding to the public key. The integrity of the request is verified using the attestation token by determining that the token creation time being within a threshold duration of the time at which the request was received, the set of data was not modified since the attestation token was created, and the verdict indicates the client device is trustworthy.

Protecting the integrity of communications from client devices

This disclosure relates to systems and techniques that can be implemented by content platforms to optimize (a) demographic-based digital component distribution used to categorize each user into a particular demographic so as to appropriately target that user for purposes of maximizing the efficacy of digital components shown to that user, and (b) demographic reporting used to report to digital component providers the effectiveness of the digital component.

Privacy preserving machine learning for content distribution and analysis

This disclosure relates to preserving the privacy of users and preventing access to information of other entities. In one aspect, a method includes receiving, from a client device, a content request including request signals specifying user group identifiers that each identify a user group that includes a user of the client device. One or more user group identifiers that satisfy a first k-anonymity process are identified. Selection parameter elements that each include data indicating a respective digital component and a selection parameter for the respective digital component are received from one or more first content platforms. At least a portion of the selection parameters and, for each selection parameter, data identifying the first content platform from which the selection parameter was received are transmitted to a second content platform. Data specifying a given first content platform selected based on the selection parameters is received from the second content platform.

Protecting access to information in online interactions

This disclosure relates to a method for anonymous attestation that includes receiving, by an application running on a client device and from a first content provider, an authentication request to authenticate a user to receive content from a second domain of a second content provider, redeeming, with an attestation token issuing system that issued an anonymous attestation token attesting to the user's authentication to the second content provider, the anonymous attestation token by transmitting the anonymous attestation token with a second request, receiving a redemption result representing whether the attestation token was successfully redeemed, signed by the attestation token issuing system using a digital signature and is operable to verify, to the second content provider, that the user is authenticated to the second content provider without identifying the user to the second content provider, and transmitting, to the first content provider, the redemption result.

Anonymous authentication with token redemption

This disclosure relates to generating telecommunication network measurements. In one aspect, a method includes presenting, by a client device, a digital component that, when interacted with, initiates a call by the client device to a phone number specified by the digital component. A trusted program stores, in a presentation event data structure, a presentation event data element specifying the phone number and resource locator for a reporting system to which reports for the digital component are sent. The trusted program detects a phone call by the client device to a given phone number. The given phone number is compared to one or more presentation event data elements stored in the presentation event data structure. A determination is made that the given phone number matches the phone number specified by the digital component. In response, an event report is transmitted to the reporting system.

Preventing data manipulation and protecting user privacy in telecommunication network measurements

Methods, systems, and apparatus, including an apparatus for managing user data according to user consent settings are described. In some aspects, a method includes determining that a request for transmission by a client device to a recipient will include user data of a user of the client device. In response determining that the request will include the user data, the method includes requesting, from a consent management module of the client device, current user consent settings specified by the user which define at least one of (i) user data that can be transmitted from the client device, (ii) how user data transmitted from the client device can be used or (iii) which recipients can receive and retain user data from the client device. The method further includes receiving, from the consent management module, the current user consent settings and generating request data according the current user consent settings.

User consent framework

This document relates to using secure MPC to select digital components in ways that preserve user privacy and protects the security of data of each party that is involved in the selection process. In one aspect, a method includes performing, by a first server of a secure MPC system in collaboration with one or more second servers of the secure MPC system, a selection process to select a digital component based in part on a selection value for each digital component in the selection process. This includes determining a first secret share of a winner parameter for each digital component in the selection process. The first server determines, for each given digital component in the selection process and in collaboration with the second server(s), a highest other selection value that corresponds to a different digital component that is different from the given digital component.

Privacy preserving measurements using secure multi-party computation

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for transmitting/processing requests to control information stored at multiple content platforms/servers. In one aspect, a client device can send a request to verify the device's trustworthiness to a device trustworthiness server. The client device can receive, from the device trustworthiness server, data indicating that the client device is trustworthy, in response to which, the client device can send, to a relay server, a request to control user data stored at a plurality of servers. The client device can receive, via the relay server, a response from each of the plurality of servers. Based on the responses, the client device can determine that at least a subset of the plurality of servers that included the user data has performed the action specified in the request to control the user data.

Processing of requests to control information stored at multiple servers

Growing community of inventors

San Diego, CA, United States of America

Gang Wang